[2025-09-07 00:03:04][352042194880718][2 ms][INFO] === Request start === [2025-09-07 00:03:04][352042194880718][2 ms][DEBUG] START check_scloud [2025-09-07 00:03:04][352042194880718][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:03:04][352042194880718][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 31321 16311 24236076 184824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:03:04][352042194880718][318 ms][DEBUG] targetPkg: running [2025-09-07 00:03:04][352042194880718][319 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 00:03:04][352042194880718][319 ms][DEBUG] START check_boot_completed [2025-09-07 00:03:04][352042194880718][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:03:04][352042194880718][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 00:03:04][352042194880718][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:03:04][352042194880718][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 00:03:04][352042194880718][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 00:03:04][352042194880718][427 ms][DEBUG] rawBody.length=1160 [2025-09-07 00:03:04][352042194880718][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042194880718\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9234\"}'\'' -e'"" [2025-09-07 00:03:04][352042194880718][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:03:04][352042194880718][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042194880718\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9234\"}'\'' -e'"" [2025-09-07 00:03:10][352042194880718][6379 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1ff5fc2-441a-4ddc-bc48-13f4f33dbfa2","id":"QR_f1ff5fc2-441a-4ddc-bc48-13f4f33dbfa2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:03:11][352042194880718][6535 ms][DEBUG] proc_open done in 6108 ms; code=255; res.len=3343 [2025-09-07 00:03:11][352042194880718][6535 ms][DEBUG] END runCmdUntilRes#1 in 6108 ms [2025-09-07 00:03:11][352042194880718][6535 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:03:14][352042194880718][1 ms][INFO] === Request start === [2025-09-07 00:03:14][352042194880718][1 ms][DEBUG] START check_scloud [2025-09-07 00:03:14][352042194880718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:03:14][352042194880718][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 31321 16311 24412544 195176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:03:14][352042194880718][284 ms][DEBUG] targetPkg: running [2025-09-07 00:03:14][352042194880718][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 00:03:14][352042194880718][284 ms][DEBUG] START check_boot_completed [2025-09-07 00:03:14][352042194880718][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:03:14][352042194880718][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 00:03:14][352042194880718][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:03:14][352042194880718][392 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 00:03:14][352042194880718][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 00:03:14][352042194880718][392 ms][DEBUG] rawBody.length=1150 [2025-09-07 00:03:14][352042194880718][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042194880718\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1689\"}'\'' -e'"" [2025-09-07 00:03:14][352042194880718][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:03:14][352042194880718][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042194880718\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1689\"}'\'' -e'"" [2025-09-07 00:03:20][352042194880718][5610 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35ef76ec-0eba-4da2-9a3a-26a966ccafad","id":"QR_35ef76ec-0eba-4da2-9a3a-26a966ccafad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:03:20][352042194880718][5766 ms][DEBUG] proc_open done in 5374 ms; code=255; res.len=3343 [2025-09-07 00:03:20][352042194880718][5766 ms][DEBUG] END runCmdUntilRes#1 in 5374 ms [2025-09-07 00:03:20][352042194880718][5766 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:17:04][352429890321883][1 ms][INFO] === Request start === [2025-09-07 00:17:04][352429890321883][1 ms][DEBUG] START check_scloud [2025-09-07 00:17:04][352429890321883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:17:04][352429890321883][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 31321 16311 24529396 144328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:17:04][352429890321883][325 ms][DEBUG] targetPkg: running [2025-09-07 00:17:04][352429890321883][326 ms][DEBUG] END check_scloud in 324 ms [2025-09-07 00:17:04][352429890321883][326 ms][DEBUG] START check_boot_completed [2025-09-07 00:17:04][352429890321883][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:17:04][352429890321883][357 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 00:17:04][352429890321883][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:17:04][352429890321883][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 00:17:04][352429890321883][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 00:17:04][352429890321883][404 ms][DEBUG] rawBody.length=1160 [2025-09-07 00:17:04][352429890321883][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429890321883\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2690\"}'\'' -e'"" [2025-09-07 00:17:04][352429890321883][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:17:04][352429890321883][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429890321883\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2690\"}'\'' -e'"" [2025-09-07 00:17:11][352429890321883][6793 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbc75871-2b5f-4d3d-a369-e2ad1f116627","id":"QR_cbc75871-2b5f-4d3d-a369-e2ad1f116627","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:17:11][352429890321883][6949 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=3343 [2025-09-07 00:17:11][352429890321883][6949 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-09-07 00:17:11][352429890321883][6949 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:17:14][352429890321883][0 ms][INFO] === Request start === [2025-09-07 00:17:14][352429890321883][1 ms][DEBUG] START check_scloud [2025-09-07 00:17:14][352429890321883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:17:15][352429890321883][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 31321 16311 24726344 155828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:17:15][352429890321883][284 ms][DEBUG] targetPkg: running [2025-09-07 00:17:15][352429890321883][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-07 00:17:15][352429890321883][285 ms][DEBUG] START check_boot_completed [2025-09-07 00:17:15][352429890321883][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:17:15][352429890321883][331 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 00:17:15][352429890321883][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:17:15][352429890321883][409 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 00:17:15][352429890321883][409 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 00:17:15][352429890321883][410 ms][DEBUG] rawBody.length=1150 [2025-09-07 00:17:15][352429890321883][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429890321883\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2178\"}'\'' -e'"" [2025-09-07 00:17:15][352429890321883][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:17:15][352429890321883][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429890321883\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2178\"}'\'' -e'"" [2025-09-07 00:17:19][352429890321883][4221 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7e5e4ee-bc53-412e-ad60-760aa7b292e6","id":"QR_d7e5e4ee-bc53-412e-ad60-760aa7b292e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:17:19][352429890321883][4377 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-07 00:17:19][352429890321883][4377 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-07 00:17:19][352429890321883][4377 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:19:04][353494117105583][0 ms][INFO] === Request start === [2025-09-07 00:19:04][353494117105583][1 ms][DEBUG] START check_scloud [2025-09-07 00:19:04][353494117105583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:19:04][353494117105583][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 31321 16311 24840136 168256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:19:04][353494117105583][306 ms][DEBUG] targetPkg: running [2025-09-07 00:19:04][353494117105583][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 00:19:04][353494117105583][306 ms][DEBUG] START check_boot_completed [2025-09-07 00:19:04][353494117105583][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:19:04][353494117105583][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 00:19:04][353494117105583][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:19:04][353494117105583][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 00:19:04][353494117105583][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 00:19:04][353494117105583][384 ms][DEBUG] rawBody.length=1160 [2025-09-07 00:19:04][353494117105583][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117105583\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7902\"}'\'' -e'"" [2025-09-07 00:19:04][353494117105583][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:19:04][353494117105583][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117105583\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7902\"}'\'' -e'"" [2025-09-07 00:19:10][353494117105583][6477 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6bdced2-b754-4561-ac19-e419f6a4ae43","id":"QR_f6bdced2-b754-4561-ac19-e419f6a4ae43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:19:10][353494117105583][6633 ms][DEBUG] proc_open done in 6248 ms; code=255; res.len=3343 [2025-09-07 00:19:10][353494117105583][6633 ms][DEBUG] END runCmdUntilRes#1 in 6248 ms [2025-09-07 00:19:10][353494117105583][6633 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:19:14][353494117105583][1 ms][INFO] === Request start === [2025-09-07 00:19:14][353494117105583][1 ms][DEBUG] START check_scloud [2025-09-07 00:19:14][353494117105583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:19:14][353494117105583][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 31321 16311 24983636 179064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:19:14][353494117105583][249 ms][DEBUG] targetPkg: running [2025-09-07 00:19:14][353494117105583][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-07 00:19:14][353494117105583][249 ms][DEBUG] START check_boot_completed [2025-09-07 00:19:14][353494117105583][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:19:14][353494117105583][296 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 00:19:14][353494117105583][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:19:14][353494117105583][358 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 00:19:14][353494117105583][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 00:19:14][353494117105583][358 ms][DEBUG] rawBody.length=1150 [2025-09-07 00:19:14][353494117105583][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117105583\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4070\"}'\'' -e'"" [2025-09-07 00:19:14][353494117105583][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:19:14][353494117105583][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117105583\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4070\"}'\'' -e'"" [2025-09-07 00:19:19][353494117105583][4857 ms][DEBUG] proc_open done in 4499 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 00:19:19][353494117105583][4858 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-09-07 00:19:19][353494117105583][4858 ms][WARN] Detected error: Process with pid 31321 either refused to load frida-agent, or terminated during injectionProcess with pid 31321 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 00:19:19][353494117105583][4858 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 00:19:19][353494117105583][5107 ms][DEBUG] SU: done in 250 ms; outsystem 2880 1 13065908 135216 ptrace_stop 0 t system_server\nsystem 16544 16311 13266532 204184 ep_poll 0 S system_server\n [2025-09-07 00:19:19][353494117105583][5107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 00:19:19][353494117105583][5249 ms][DEBUG] SU: done in 142 ms; out [2025-09-07 00:19:19][353494117105583][5249 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 00:19:19][353494117105583][5250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 00:19:19][353494117105583][5373 ms][DEBUG] SU: done in 123 ms; out [2025-09-07 00:19:19][353494117105583][5373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 00:19:19][353494117105583][5560 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 00:19:21][353494117105583][7575 ms][DEBUG] START check_boot_completed [2025-09-07 00:19:21][353494117105583][7575 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:19:22][353494117105583][7622 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 00:19:22][353494117105583][7622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:19:22][353494117105583][7669 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 00:19:22][353494117105583][7669 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 00:19:25][353494117105583][10684 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 00:19:25][353494117105583][10684 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117105583\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4070\"}'\'' -e'"" [2025-09-07 00:19:25][353494117105583][11309 ms][DEBUG] proc_open done in 625 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-07 00:19:25][353494117105583][11309 ms][DEBUG] END runCmdUntilRes#2 in 625 ms [2025-09-07 00:19:25][353494117105583][11309 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-07 00:19:25][353494117105583][11309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 00:19:26][353494117105583][11637 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 00:20:04][357873778111368][0 ms][INFO] === Request start === [2025-09-07 00:20:04][357873778111368][1 ms][DEBUG] START check_scloud [2025-09-07 00:20:04][357873778111368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:20:04][357873778111368][442 ms][DEBUG] SU: done in 442 ms; out [2025-09-07 00:20:04][357873778111368][442 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 00:20:04][357873778111368][489 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 00:20:04][357873778111368][489 ms][DEBUG] check_devices: device found [2025-09-07 00:20:04][357873778111368][490 ms][WARN] targetPkg: not running, restarting [2025-09-07 00:20:04][357873778111368][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 00:20:04][357873778111368][677 ms][DEBUG] SU: done in 187 ms; out [2025-09-07 00:20:04][357873778111368][677 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 00:20:05][357873778111368][989 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 00:20:07][357873778111368][3004 ms][DEBUG] END check_scloud in 3003 ms [2025-09-07 00:20:07][357873778111368][3004 ms][DEBUG] START check_boot_completed [2025-09-07 00:20:07][357873778111368][3004 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:20:07][357873778111368][3051 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 00:20:07][357873778111368][3051 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:20:07][357873778111368][3113 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 00:20:07][357873778111368][3113 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 00:20:07][357873778111368][3113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 00:20:07][357873778111368][3332 ms][DEBUG] SU: done in 219 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 116\nsuccessfulTxPacketsPerSecond: 15.713396145975446\nretriedTxPackets: 7\nretriedTxPacketsPerSecond: 0.8716804710429799\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 97\nsuccessfulRxPacketsPerSecond: 13.910448097477097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 00:20:07][357873778111368][3332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 00:20:08][357873778111368][4473 ms][DEBUG] SU: done in 1140 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=403 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 403.464/403.464/403.464/0.000 ms\n [2025-09-07 00:20:08][357873778111368][4473 ms][DEBUG] check_internet: online [2025-09-07 00:20:08][357873778111368][4473 ms][DEBUG] rawBody.length=1160 [2025-09-07 00:20:08][357873778111368][4473 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873778111368\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8149\"}'\'' -e'"" [2025-09-07 00:20:08][357873778111368][4473 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:20:08][357873778111368][4473 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873778111368\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8149\"}'\'' -e'"" [2025-09-07 00:20:18][357873778111368][14033 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e9376a7-9509-42c1-b480-c8fb762bc34f","id":"QR_5e9376a7-9509-42c1-b480-c8fb762bc34f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:20:18][357873778111368][14189 ms][DEBUG] proc_open done in 9716 ms; code=255; res.len=3343 [2025-09-07 00:20:18][357873778111368][14189 ms][DEBUG] END runCmdUntilRes#1 in 9716 ms [2025-09-07 00:20:18][357873778111368][14189 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:20:21][357873778111368][0 ms][INFO] === Request start === [2025-09-07 00:20:21][357873778111368][1 ms][DEBUG] START check_scloud [2025-09-07 00:20:21][357873778111368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:20:22][357873778111368][395 ms][DEBUG] SU: done in 394 ms; outu0_a118 6185 3039 23547520 102624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:20:22][357873778111368][395 ms][DEBUG] targetPkg: running [2025-09-07 00:20:22][357873778111368][395 ms][DEBUG] END check_scloud in 395 ms [2025-09-07 00:20:22][357873778111368][396 ms][DEBUG] START check_boot_completed [2025-09-07 00:20:22][357873778111368][396 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:20:22][357873778111368][442 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 00:20:22][357873778111368][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:20:22][357873778111368][505 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 00:20:22][357873778111368][505 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 00:20:22][357873778111368][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 00:20:22][357873778111368][661 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 281\nsuccessfulTxPacketsPerSecond: 14.135528477674322\nretriedTxPackets: 41\nretriedTxPacketsPerSecond: 3.065703950820227\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 250\nsuccessfulRxPacketsPerSecond: 13.083942271606915\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 00:20:22][357873778111368][661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 00:20:22][357873778111368][1036 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.401/234.401/234.401/0.000 ms\n [2025-09-07 00:20:22][357873778111368][1036 ms][DEBUG] check_internet: online [2025-09-07 00:20:22][357873778111368][1036 ms][DEBUG] rawBody.length=1150 [2025-09-07 00:20:22][357873778111368][1036 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873778111368\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3562\"}'\'' -e'"" [2025-09-07 00:20:22][357873778111368][1036 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:20:22][357873778111368][1036 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357873778111368\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3562\"}'\'' -e'"" [2025-09-07 00:20:28][357873778111368][6831 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0cc9cdef-aaf2-446b-be76-7712fbcde3bb","id":"QR_0cc9cdef-aaf2-446b-be76-7712fbcde3bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:20:28][357873778111368][6987 ms][DEBUG] proc_open done in 5951 ms; code=255; res.len=3343 [2025-09-07 00:20:28][357873778111368][6987 ms][DEBUG] END runCmdUntilRes#1 in 5951 ms [2025-09-07 00:20:28][357873778111368][6987 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:26:04][357800557258342][1 ms][INFO] === Request start === [2025-09-07 00:26:04][357800557258342][1 ms][DEBUG] START check_scloud [2025-09-07 00:26:04][357800557258342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:26:04][357800557258342][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 6185 3039 23574736 67236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:26:04][357800557258342][320 ms][DEBUG] targetPkg: running [2025-09-07 00:26:04][357800557258342][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 00:26:04][357800557258342][320 ms][DEBUG] START check_boot_completed [2025-09-07 00:26:04][357800557258342][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:26:05][357800557258342][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 00:26:05][357800557258342][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:26:05][357800557258342][414 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 00:26:05][357800557258342][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 00:26:05][357800557258342][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 00:26:05][357800557258342][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1155\nsuccessfulTxPacketsPerSecond: 2.7770207061146017\nretriedTxPackets: 154\nretriedTxPacketsPerSecond: 0.33147462009325485\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1204\nsuccessfulRxPacketsPerSecond: 3.115861428876596\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 00:26:05][357800557258342][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 00:26:06][357800557258342][1882 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.788/301.788/301.788/0.000 ms\n [2025-09-07 00:26:06][357800557258342][1882 ms][DEBUG] check_internet: online [2025-09-07 00:26:06][357800557258342][1882 ms][DEBUG] rawBody.length=1160 [2025-09-07 00:26:06][357800557258342][1882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557258342\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1511\"}'\'' -e'"" [2025-09-07 00:26:06][357800557258342][1883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:26:06][357800557258342][1883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557258342\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1511\"}'\'' -e'"" [2025-09-07 00:26:12][357800557258342][7740 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_366acc26-74a3-4edc-a843-5c47db642a5e","id":"QR_366acc26-74a3-4edc-a843-5c47db642a5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:26:12][357800557258342][7897 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-09-07 00:26:12][357800557258342][7897 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-09-07 00:26:12][357800557258342][7897 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:26:15][357800557258342][0 ms][INFO] === Request start === [2025-09-07 00:26:15][357800557258342][1 ms][DEBUG] START check_scloud [2025-09-07 00:26:15][357800557258342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:26:16][357800557258342][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 6185 3039 23696856 85568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:26:16][357800557258342][269 ms][DEBUG] targetPkg: running [2025-09-07 00:26:16][357800557258342][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 00:26:16][357800557258342][269 ms][DEBUG] START check_boot_completed [2025-09-07 00:26:16][357800557258342][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:26:16][357800557258342][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 00:26:16][357800557258342][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:26:16][357800557258342][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 00:26:16][357800557258342][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 00:26:16][357800557258342][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 00:26:16][357800557258342][471 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1155\nsuccessfulTxPacketsPerSecond: 2.7770207061146017\nretriedTxPackets: 154\nretriedTxPacketsPerSecond: 0.33147462009325485\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1204\nsuccessfulRxPacketsPerSecond: 3.115861428876596\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 00:26:16][357800557258342][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 00:26:16][357800557258342][893 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.961/286.961/286.961/0.000 ms\n [2025-09-07 00:26:16][357800557258342][893 ms][DEBUG] check_internet: online [2025-09-07 00:26:16][357800557258342][894 ms][DEBUG] rawBody.length=1150 [2025-09-07 00:26:16][357800557258342][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557258342\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4302\"}'\'' -e'"" [2025-09-07 00:26:16][357800557258342][894 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:26:16][357800557258342][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800557258342\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4302\"}'\'' -e'"" [2025-09-07 00:26:21][357800557258342][5548 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f80c68e-4148-4251-a784-2a142bf342b1","id":"QR_5f80c68e-4148-4251-a784-2a142bf342b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:26:21][357800557258342][5704 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 00:26:21][357800557258342][5704 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 00:26:21][357800557258342][5704 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:55:04][358110362685617][1 ms][INFO] === Request start === [2025-09-07 00:55:04][358110362685617][1 ms][DEBUG] START check_scloud [2025-09-07 00:55:04][358110362685617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:55:05][358110362685617][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 6185 3039 23817804 97828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:55:05][358110362685617][316 ms][DEBUG] targetPkg: running [2025-09-07 00:55:05][358110362685617][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 00:55:05][358110362685617][316 ms][DEBUG] START check_boot_completed [2025-09-07 00:55:05][358110362685617][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:55:05][358110362685617][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 00:55:05][358110362685617][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:55:05][358110362685617][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 00:55:05][358110362685617][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 00:55:05][358110362685617][409 ms][DEBUG] rawBody.length=1160 [2025-09-07 00:55:05][358110362685617][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358110362685617\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1635\"}'\'' -e'"" [2025-09-07 00:55:05][358110362685617][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:55:05][358110362685617][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358110362685617\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1635\"}'\'' -e'"" [2025-09-07 00:55:11][358110362685617][6330 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f304392-ca58-4f60-a71d-6ad3ffe02910","id":"QR_8f304392-ca58-4f60-a71d-6ad3ffe02910","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:55:11][358110362685617][6486 ms][DEBUG] proc_open done in 6077 ms; code=255; res.len=3343 [2025-09-07 00:55:11][358110362685617][6486 ms][DEBUG] END runCmdUntilRes#1 in 6077 ms [2025-09-07 00:55:11][358110362685617][6486 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:55:14][358110362685617][0 ms][INFO] === Request start === [2025-09-07 00:55:14][358110362685617][1 ms][DEBUG] START check_scloud [2025-09-07 00:55:14][358110362685617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:55:14][358110362685617][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 6185 3039 23985112 108860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:55:14][358110362685617][319 ms][DEBUG] targetPkg: running [2025-09-07 00:55:14][358110362685617][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 00:55:14][358110362685617][319 ms][DEBUG] START check_boot_completed [2025-09-07 00:55:14][358110362685617][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:55:15][358110362685617][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 00:55:15][358110362685617][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:55:15][358110362685617][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 00:55:15][358110362685617][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 00:55:15][358110362685617][428 ms][DEBUG] rawBody.length=1150 [2025-09-07 00:55:15][358110362685617][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358110362685617\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9818\"}'\'' -e'"" [2025-09-07 00:55:15][358110362685617][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:55:15][358110362685617][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358110362685617\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9818\"}'\'' -e'"" [2025-09-07 00:55:19][358110362685617][4552 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5227f4c-f82d-4b46-a59d-6300d71ff4b4","id":"QR_f5227f4c-f82d-4b46-a59d-6300d71ff4b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:55:19][358110362685617][4708 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-09-07 00:55:19][358110362685617][4708 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-07 00:55:19][358110362685617][4708 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 00:59:06][353249140349552][1 ms][INFO] === Request start === [2025-09-07 00:59:06][353249140349552][1 ms][DEBUG] START check_scloud [2025-09-07 00:59:06][353249140349552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 00:59:06][353249140349552][339 ms][DEBUG] SU: done in 338 ms; outu0_a118 6185 3039 24102872 104088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 00:59:06][353249140349552][339 ms][DEBUG] targetPkg: running [2025-09-07 00:59:06][353249140349552][339 ms][DEBUG] END check_scloud in 338 ms [2025-09-07 00:59:06][353249140349552][339 ms][DEBUG] START check_boot_completed [2025-09-07 00:59:06][353249140349552][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 00:59:06][353249140349552][371 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 00:59:06][353249140349552][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 00:59:06][353249140349552][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 00:59:06][353249140349552][418 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 00:59:06][353249140349552][418 ms][DEBUG] rawBody.length=1170 [2025-09-07 00:59:06][353249140349552][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249140349552\",\"model\":\"SM-T220\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9PT80QEBKM\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6531\"}'\'' -e'"" [2025-09-07 00:59:06][353249140349552][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 00:59:06][353249140349552][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249140349552\",\"model\":\"SM-T220\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9PT80QEBKM\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6531\"}'\'' -e'"" [2025-09-07 00:59:13][353249140349552][6713 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb99fb02-62a8-4157-9b79-10ee12694f19","id":"QR_bb99fb02-62a8-4157-9b79-10ee12694f19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 00:59:13][353249140349552][6869 ms][DEBUG] proc_open done in 6451 ms; code=255; res.len=3343 [2025-09-07 00:59:13][353249140349552][6869 ms][DEBUG] END runCmdUntilRes#1 in 6451 ms [2025-09-07 00:59:13][353249140349552][6869 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 01:17:03][357042147415997][1 ms][INFO] === Request start === [2025-09-07 01:17:03][357042147415997][1 ms][DEBUG] START check_scloud [2025-09-07 01:17:03][357042147415997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 01:17:04][357042147415997][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 6185 3039 24194224 111876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 01:17:04][357042147415997][320 ms][DEBUG] targetPkg: running [2025-09-07 01:17:04][357042147415997][320 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 01:17:04][357042147415997][320 ms][DEBUG] START check_boot_completed [2025-09-07 01:17:04][357042147415997][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 01:17:04][357042147415997][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 01:17:04][357042147415997][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 01:17:04][357042147415997][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 01:17:04][357042147415997][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 01:17:04][357042147415997][398 ms][DEBUG] rawBody.length=1150 [2025-09-07 01:17:04][357042147415997][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147415997\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3119\"}'\'' -e'"" [2025-09-07 01:17:04][357042147415997][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 01:17:04][357042147415997][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147415997\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3119\"}'\'' -e'"" [2025-09-07 01:17:08][357042147415997][5053 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6a161e4-21fd-4841-a948-70a74219bed8","id":"QR_e6a161e4-21fd-4841-a948-70a74219bed8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 01:17:09][357042147415997][5209 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 01:17:09][357042147415997][5209 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 01:17:09][357042147415997][5209 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 01:17:11][357042147415997][0 ms][INFO] === Request start === [2025-09-07 01:17:11][357042147415997][1 ms][DEBUG] START check_scloud [2025-09-07 01:17:11][357042147415997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 01:17:11][357042147415997][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 6185 3039 24362500 116536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 01:17:11][357042147415997][323 ms][DEBUG] targetPkg: running [2025-09-07 01:17:11][357042147415997][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 01:17:11][357042147415997][323 ms][DEBUG] START check_boot_completed [2025-09-07 01:17:11][357042147415997][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 01:17:11][357042147415997][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 01:17:11][357042147415997][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 01:17:11][357042147415997][432 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 01:17:11][357042147415997][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 01:17:11][357042147415997][432 ms][DEBUG] rawBody.length=1160 [2025-09-07 01:17:11][357042147415997][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147415997\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2944\"}'\'' -e'"" [2025-09-07 01:17:11][357042147415997][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 01:17:11][357042147415997][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147415997\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2944\"}'\'' -e'"" [2025-09-07 01:17:17][357042147415997][5525 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7877b16-7580-4333-8543-bc5443dd94c1","id":"QR_b7877b16-7580-4333-8543-bc5443dd94c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 01:17:17][357042147415997][5681 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-07 01:17:17][357042147415997][5681 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-07 01:17:17][357042147415997][5681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 01:17:22][350822574685296][1 ms][INFO] === Request start === [2025-09-07 01:17:22][350822574685296][1 ms][DEBUG] START check_scloud [2025-09-07 01:17:22][350822574685296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 01:17:22][350822574685296][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 6185 3039 24539788 121900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 01:17:22][350822574685296][313 ms][DEBUG] targetPkg: running [2025-09-07 01:17:22][350822574685296][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 01:17:22][350822574685296][313 ms][DEBUG] START check_boot_completed [2025-09-07 01:17:22][350822574685296][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 01:17:22][350822574685296][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 01:17:22][350822574685296][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 01:17:22][350822574685296][422 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 01:17:22][350822574685296][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 01:17:22][350822574685296][423 ms][DEBUG] rawBody.length=1160 [2025-09-07 01:17:22][350822574685296][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574685296\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2891\"}'\'' -e'"" [2025-09-07 01:17:22][350822574685296][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 01:17:22][350822574685296][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574685296\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2891\"}'\'' -e'"" [2025-09-07 01:17:27][350822574685296][5312 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_358df55f-427f-41ae-8221-86dfb401e401","id":"QR_358df55f-427f-41ae-8221-86dfb401e401","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 01:17:28][350822574685296][5468 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-07 01:17:28][350822574685296][5468 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-07 01:17:28][350822574685296][5468 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 01:17:31][350822574685296][0 ms][INFO] === Request start === [2025-09-07 01:17:31][350822574685296][1 ms][DEBUG] START check_scloud [2025-09-07 01:17:31][350822574685296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 01:17:31][350822574685296][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 6185 3039 24659828 133296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 01:17:31][350822574685296][285 ms][DEBUG] targetPkg: running [2025-09-07 01:17:31][350822574685296][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-07 01:17:31][350822574685296][285 ms][DEBUG] START check_boot_completed [2025-09-07 01:17:31][350822574685296][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 01:17:31][350822574685296][332 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 01:17:31][350822574685296][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 01:17:31][350822574685296][426 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 01:17:31][350822574685296][426 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 01:17:31][350822574685296][426 ms][DEBUG] rawBody.length=1150 [2025-09-07 01:17:31][350822574685296][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574685296\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4764\"}'\'' -e'"" [2025-09-07 01:17:31][350822574685296][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 01:17:31][350822574685296][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574685296\",\"model\":\"SM-S926U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4764\"}'\'' -e'"" [2025-09-07 01:17:35][350822574685296][4112 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e08987fd-180c-4b1d-a106-395835f196c1","id":"QR_e08987fd-180c-4b1d-a106-395835f196c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 01:17:35][350822574685296][4268 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-07 01:17:35][350822574685296][4268 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-07 01:17:35][350822574685296][4268 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 01:57:09][358004070287123][1 ms][INFO] === Request start === [2025-09-07 01:57:09][358004070287123][1 ms][DEBUG] START check_scloud [2025-09-07 01:57:09][358004070287123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 01:57:09][358004070287123][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 6185 3039 24737732 118988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 01:57:09][358004070287123][320 ms][DEBUG] targetPkg: running [2025-09-07 01:57:09][358004070287123][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 01:57:09][358004070287123][320 ms][DEBUG] START check_boot_completed [2025-09-07 01:57:09][358004070287123][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 01:57:09][358004070287123][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 01:57:09][358004070287123][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 01:57:09][358004070287123][400 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 01:57:09][358004070287123][400 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 01:57:09][358004070287123][400 ms][DEBUG] rawBody.length=1150 [2025-09-07 01:57:09][358004070287123][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358004070287123\",\"model\":\"SM-T285M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-09-07 01:57:09][358004070287123][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 01:57:09][358004070287123][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358004070287123\",\"model\":\"SM-T285M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-09-07 01:57:14][358004070287123][5007 ms][DEBUG] proc_open done in 4606 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-07 01:57:14][358004070287123][5007 ms][DEBUG] END runCmdUntilRes#1 in 4606 ms [2025-09-07 01:57:14][358004070287123][5007 ms][WARN] Detected error: Process with pid 6185 either refused to load frida-agent, or terminated during injectionProcess with pid 6185 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 01:57:14][358004070287123][5007 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 01:57:14][358004070287123][5288 ms][DEBUG] SU: done in 281 ms; outsystem 3388 3039 12542420 194288 ep_poll 0 S system_server\n [2025-09-07 01:57:14][358004070287123][5288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 01:57:14][358004070287123][5444 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 01:57:14][358004070287123][5445 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 01:57:14][358004070287123][5445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 01:57:15][358004070287123][5601 ms][DEBUG] SU: done in 157 ms; out [2025-09-07 01:57:15][358004070287123][5602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 01:57:15][358004070287123][5866 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 01:57:17][358004070287123][7881 ms][DEBUG] START check_boot_completed [2025-09-07 01:57:17][358004070287123][7881 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 01:57:17][358004070287123][7928 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 01:57:17][358004070287123][7928 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 01:57:17][358004070287123][7975 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 01:57:17][358004070287123][7975 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 01:57:20][358004070287123][10990 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 01:57:20][358004070287123][10990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358004070287123\",\"model\":\"SM-T285M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-09-07 01:57:24][358004070287123][14583 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b29423a4-d73b-41dc-a9ab-5a177f03e77c","id":"QR_b29423a4-d73b-41dc-a9ab-5a177f03e77c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 01:57:24][358004070287123][14739 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-07 01:57:24][358004070287123][14739 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-09-07 01:57:24][358004070287123][14739 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 02:00:05][350332470028443][1 ms][INFO] === Request start === [2025-09-07 02:00:05][350332470028443][1 ms][DEBUG] START check_scloud [2025-09-07 02:00:05][350332470028443][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 02:00:05][350332470028443][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 19844 3039 23374224 126296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 02:00:05][350332470028443][300 ms][DEBUG] targetPkg: running [2025-09-07 02:00:05][350332470028443][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 02:00:05][350332470028443][300 ms][DEBUG] START check_boot_completed [2025-09-07 02:00:05][350332470028443][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 02:00:05][350332470028443][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 02:00:05][350332470028443][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 02:00:05][350332470028443][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 02:00:05][350332470028443][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 02:00:05][350332470028443][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 02:00:06][350332470028443][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2123\nsuccessfulTxPacketsPerSecond: 0.3625389813325993\nretriedTxPackets: 408\nretriedTxPacketsPerSecond: 0.10070527259238869\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2102\nsuccessfulRxPacketsPerSecond: 0.359182138912853\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 02:00:06][350332470028443][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 02:00:07][350332470028443][1847 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.308/294.308/294.308/0.000 ms\n [2025-09-07 02:00:07][350332470028443][1847 ms][DEBUG] check_internet: online [2025-09-07 02:00:07][350332470028443][1847 ms][DEBUG] rawBody.length=1160 [2025-09-07 02:00:07][350332470028443][1847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350332470028443\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9644\"}'\'' -e'"" [2025-09-07 02:00:07][350332470028443][1847 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 02:00:07][350332470028443][1847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350332470028443\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9644\"}'\'' -e'"" [2025-09-07 02:00:12][350332470028443][7298 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f695aa72-e3f8-403a-8de4-31fcc9ae33fa","id":"QR_f695aa72-e3f8-403a-8de4-31fcc9ae33fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 02:00:12][350332470028443][7455 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-07 02:00:12][350332470028443][7455 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-07 02:00:12][350332470028443][7455 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 02:00:16][350332470028443][0 ms][INFO] === Request start === [2025-09-07 02:00:16][350332470028443][1 ms][DEBUG] START check_scloud [2025-09-07 02:00:16][350332470028443][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 02:00:16][350332470028443][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 19844 3039 23535192 137172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 02:00:16][350332470028443][259 ms][DEBUG] targetPkg: running [2025-09-07 02:00:16][350332470028443][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 02:00:16][350332470028443][259 ms][DEBUG] START check_boot_completed [2025-09-07 02:00:16][350332470028443][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 02:00:16][350332470028443][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 02:00:16][350332470028443][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 02:00:16][350332470028443][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 02:00:16][350332470028443][353 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 02:00:16][350332470028443][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 02:00:16][350332470028443][477 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2123\nsuccessfulTxPacketsPerSecond: 0.3625389813325993\nretriedTxPackets: 408\nretriedTxPacketsPerSecond: 0.10070527259238869\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2102\nsuccessfulRxPacketsPerSecond: 0.359182138912853\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 02:00:16][350332470028443][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 02:00:17][350332470028443][852 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.357/270.357/270.357/0.000 ms\n [2025-09-07 02:00:17][350332470028443][852 ms][DEBUG] check_internet: online [2025-09-07 02:00:17][350332470028443][852 ms][DEBUG] rawBody.length=1150 [2025-09-07 02:00:17][350332470028443][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350332470028443\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8788\"}'\'' -e'"" [2025-09-07 02:00:17][350332470028443][852 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 02:00:17][350332470028443][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350332470028443\",\"model\":\"SM-S916B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8788\"}'\'' -e'"" [2025-09-07 02:00:21][350332470028443][4617 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdfdd6d6-6e80-43f9-8cfa-6e88d4abd424","id":"QR_fdfdd6d6-6e80-43f9-8cfa-6e88d4abd424","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 02:00:21][350332470028443][4773 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-09-07 02:00:21][350332470028443][4773 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-07 02:00:21][350332470028443][4773 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 02:02:05][356663766969393][0 ms][INFO] === Request start === [2025-09-07 02:02:05][356663766969393][1 ms][DEBUG] START check_scloud [2025-09-07 02:02:05][356663766969393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 02:02:06][356663766969393][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 19844 3039 23674548 149212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 02:02:06][356663766969393][320 ms][DEBUG] targetPkg: running [2025-09-07 02:02:06][356663766969393][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 02:02:06][356663766969393][320 ms][DEBUG] START check_boot_completed [2025-09-07 02:02:06][356663766969393][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 02:02:06][356663766969393][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 02:02:06][356663766969393][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 02:02:06][356663766969393][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 02:02:06][356663766969393][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 02:02:06][356663766969393][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 02:02:06][356663766969393][523 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2123\nsuccessfulTxPacketsPerSecond: 0.3625389813325993\nretriedTxPackets: 408\nretriedTxPacketsPerSecond: 0.10070527259238869\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2102\nsuccessfulRxPacketsPerSecond: 0.359182138912853\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 02:02:06][356663766969393][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 02:02:06][356663766969393][913 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.073/274.073/274.073/0.000 ms\n [2025-09-07 02:02:06][356663766969393][913 ms][DEBUG] check_internet: online [2025-09-07 02:02:06][356663766969393][913 ms][DEBUG] rawBody.length=1170 [2025-09-07 02:02:06][356663766969393][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663766969393\",\"model\":\"SM-T220\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9PT503CLCA\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4191\"}'\'' -e'"" [2025-09-07 02:02:06][356663766969393][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 02:02:06][356663766969393][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663766969393\",\"model\":\"SM-T220\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9PT503CLCA\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4191\"}'\'' -e'"" [2025-09-07 02:02:12][356663766969393][7084 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dce0049c-6bdf-4819-a58d-42fd36a6c9cc","id":"QR_dce0049c-6bdf-4819-a58d-42fd36a6c9cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 02:02:13][356663766969393][7240 ms][DEBUG] proc_open done in 6327 ms; code=255; res.len=3343 [2025-09-07 02:02:13][356663766969393][7240 ms][DEBUG] END runCmdUntilRes#1 in 6327 ms [2025-09-07 02:02:13][356663766969393][7240 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 02:16:03][355857110668526][1 ms][INFO] === Request start === [2025-09-07 02:16:03][355857110668526][1 ms][DEBUG] START check_scloud [2025-09-07 02:16:03][355857110668526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 02:16:03][355857110668526][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 19844 3039 23803852 161004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 02:16:03][355857110668526][321 ms][DEBUG] targetPkg: running [2025-09-07 02:16:03][355857110668526][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-07 02:16:03][355857110668526][321 ms][DEBUG] START check_boot_completed [2025-09-07 02:16:03][355857110668526][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 02:16:03][355857110668526][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 02:16:03][355857110668526][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 02:16:04][355857110668526][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 02:16:04][355857110668526][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 02:16:04][355857110668526][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 02:16:04][355857110668526][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2244\nsuccessfulTxPacketsPerSecond: 0.004272664385753325\nretriedTxPackets: 461\nretriedTxPacketsPerSecond: 0.004272664385753325\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2204\nsuccessfulRxPacketsPerSecond: 0.004272664385753325\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 02:16:04][355857110668526][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 02:16:05][355857110668526][2009 ms][DEBUG] SU: done in 1499 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.680/300.680/300.680/0.000 ms\n [2025-09-07 02:16:05][355857110668526][2009 ms][DEBUG] check_internet: online [2025-09-07 02:16:05][355857110668526][2009 ms][DEBUG] rawBody.length=1150 [2025-09-07 02:16:05][355857110668526][2009 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857110668526\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3202\"}'\'' -e'"" [2025-09-07 02:16:05][355857110668526][2009 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 02:16:05][355857110668526][2009 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857110668526\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3202\"}'\'' -e'"" [2025-09-07 02:16:10][355857110668526][6429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71395ed7-a4f9-412c-9871-962c3f0cd5ff","id":"QR_71395ed7-a4f9-412c-9871-962c3f0cd5ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 02:16:10][355857110668526][6585 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-07 02:16:10][355857110668526][6585 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-09-07 02:16:10][355857110668526][6585 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 02:16:12][355857110668526][0 ms][INFO] === Request start === [2025-09-07 02:16:12][355857110668526][1 ms][DEBUG] START check_scloud [2025-09-07 02:16:12][355857110668526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 02:16:12][355857110668526][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19844 3039 23988320 171728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 02:16:12][355857110668526][316 ms][DEBUG] targetPkg: running [2025-09-07 02:16:12][355857110668526][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 02:16:12][355857110668526][316 ms][DEBUG] START check_boot_completed [2025-09-07 02:16:12][355857110668526][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 02:16:12][355857110668526][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 02:16:12][355857110668526][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 02:16:12][355857110668526][395 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 02:16:12][355857110668526][396 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 02:16:12][355857110668526][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 02:16:13][355857110668526][534 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2244\nsuccessfulTxPacketsPerSecond: 0.004272664385753325\nretriedTxPackets: 461\nretriedTxPacketsPerSecond: 0.004272664385753325\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2204\nsuccessfulRxPacketsPerSecond: 0.004272664385753325\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 02:16:13][355857110668526][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 02:16:13][355857110668526][862 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.398/228.398/228.398/0.000 ms\n [2025-09-07 02:16:13][355857110668526][862 ms][DEBUG] check_internet: online [2025-09-07 02:16:13][355857110668526][862 ms][DEBUG] rawBody.length=1160 [2025-09-07 02:16:13][355857110668526][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857110668526\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1982\"}'\'' -e'"" [2025-09-07 02:16:13][355857110668526][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 02:16:13][355857110668526][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857110668526\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1982\"}'\'' -e'"" [2025-09-07 02:16:18][355857110668526][6283 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_929c7013-135c-43d9-9965-8c5dbf7469ea","id":"QR_929c7013-135c-43d9-9965-8c5dbf7469ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 02:16:18][355857110668526][6439 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3343 [2025-09-07 02:16:18][355857110668526][6439 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-09-07 02:16:18][355857110668526][6439 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:23:03][351089966929471][1 ms][INFO] === Request start === [2025-09-07 03:23:03][351089966929471][1 ms][DEBUG] START check_scloud [2025-09-07 03:23:03][351089966929471][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:23:04][351089966929471][365 ms][DEBUG] SU: done in 364 ms; outu0_a118 19844 3039 24120972 115032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:23:04][351089966929471][365 ms][DEBUG] targetPkg: running [2025-09-07 03:23:04][351089966929471][365 ms][DEBUG] END check_scloud in 364 ms [2025-09-07 03:23:04][351089966929471][365 ms][DEBUG] START check_boot_completed [2025-09-07 03:23:04][351089966929471][365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:23:04][351089966929471][397 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 03:23:04][351089966929471][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:23:04][351089966929471][443 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 03:23:04][351089966929471][443 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 03:23:04][351089966929471][443 ms][DEBUG] rawBody.length=1149 [2025-09-07 03:23:04][351089966929471][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089966929471\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5151\"}'\'' -e'"" [2025-09-07 03:23:04][351089966929471][443 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:23:04][351089966929471][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089966929471\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5151\"}'\'' -e'"" [2025-09-07 03:23:09][351089966929471][5192 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9d6c591-d4b5-4158-80a2-5436810f3867","id":"QR_b9d6c591-d4b5-4158-80a2-5436810f3867","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:23:09][351089966929471][5348 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-07 03:23:09][351089966929471][5348 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-07 03:23:09][351089966929471][5349 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:23:11][351089966929471][0 ms][INFO] === Request start === [2025-09-07 03:23:11][351089966929471][1 ms][DEBUG] START check_scloud [2025-09-07 03:23:11][351089966929471][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:23:11][351089966929471][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19844 3039 24274784 118252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:23:11][351089966929471][315 ms][DEBUG] targetPkg: running [2025-09-07 03:23:11][351089966929471][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 03:23:11][351089966929471][315 ms][DEBUG] START check_boot_completed [2025-09-07 03:23:11][351089966929471][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:23:11][351089966929471][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 03:23:11][351089966929471][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:23:11][351089966929471][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 03:23:11][351089966929471][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 03:23:11][351089966929471][408 ms][DEBUG] rawBody.length=1159 [2025-09-07 03:23:11][351089966929471][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089966929471\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9331\"}'\'' -e'"" [2025-09-07 03:23:11][351089966929471][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:23:11][351089966929471][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351089966929471\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9331\"}'\'' -e'"" [2025-09-07 03:23:16][351089966929471][5438 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0af85d63-7e17-4f76-bfca-5b34630a7226","id":"QR_0af85d63-7e17-4f76-bfca-5b34630a7226","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:23:17][351089966929471][5595 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 03:23:17][351089966929471][5595 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 03:23:17][351089966929471][5595 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:25:05][352429891573276][1 ms][INFO] === Request start === [2025-09-07 03:25:05][352429891573276][1 ms][DEBUG] START check_scloud [2025-09-07 03:25:05][352429891573276][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:25:05][352429891573276][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 19844 3039 24365984 119472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:25:05][352429891573276][332 ms][DEBUG] targetPkg: running [2025-09-07 03:25:05][352429891573276][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-07 03:25:05][352429891573276][332 ms][DEBUG] START check_boot_completed [2025-09-07 03:25:05][352429891573276][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:25:05][352429891573276][363 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 03:25:05][352429891573276][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:25:05][352429891573276][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 03:25:05][352429891573276][410 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 03:25:05][352429891573276][410 ms][DEBUG] rawBody.length=1160 [2025-09-07 03:25:05][352429891573276][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891573276\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5700\"}'\'' -e'"" [2025-09-07 03:25:05][352429891573276][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:25:05][352429891573276][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891573276\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5700\"}'\'' -e'"" [2025-09-07 03:25:11][352429891573276][6456 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_598fbe23-953d-421b-9ef7-2974c59d025f","id":"QR_598fbe23-953d-421b-9ef7-2974c59d025f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:25:11][352429891573276][6612 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-09-07 03:25:11][352429891573276][6612 ms][DEBUG] END runCmdUntilRes#1 in 6202 ms [2025-09-07 03:25:11][352429891573276][6612 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:25:15][352429891573276][0 ms][INFO] === Request start === [2025-09-07 03:25:15][352429891573276][1 ms][DEBUG] START check_scloud [2025-09-07 03:25:15][352429891573276][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:25:15][352429891573276][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 19844 3039 24538280 128164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:25:15][352429891573276][275 ms][DEBUG] targetPkg: running [2025-09-07 03:25:15][352429891573276][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-07 03:25:15][352429891573276][275 ms][DEBUG] START check_boot_completed [2025-09-07 03:25:15][352429891573276][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:25:15][352429891573276][321 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 03:25:15][352429891573276][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:25:15][352429891573276][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 03:25:15][352429891573276][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 03:25:15][352429891573276][368 ms][DEBUG] rawBody.length=1150 [2025-09-07 03:25:15][352429891573276][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891573276\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-09-07 03:25:15][352429891573276][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:25:15][352429891573276][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429891573276\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-09-07 03:25:19][352429891573276][4351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0add8ad7-49c6-4833-bdd9-912353ac6b61","id":"QR_0add8ad7-49c6-4833-bdd9-912353ac6b61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:25:19][352429891573276][4508 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-07 03:25:19][352429891573276][4508 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-07 03:25:19][352429891573276][4508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:35:03][351376410488992][1 ms][INFO] === Request start === [2025-09-07 03:35:03][351376410488992][1 ms][DEBUG] START check_scloud [2025-09-07 03:35:03][351376410488992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:35:03][351376410488992][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19844 3039 24626336 133256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:35:03][351376410488992][304 ms][DEBUG] targetPkg: running [2025-09-07 03:35:03][351376410488992][305 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 03:35:03][351376410488992][305 ms][DEBUG] START check_boot_completed [2025-09-07 03:35:03][351376410488992][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:35:03][351376410488992][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 03:35:03][351376410488992][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:35:03][351376410488992][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 03:35:03][351376410488992][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 03:35:03][351376410488992][383 ms][DEBUG] rawBody.length=1150 [2025-09-07 03:35:03][351376410488992][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376410488992\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1170\"}'\'' -e'"" [2025-09-07 03:35:03][351376410488992][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:35:03][351376410488992][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376410488992\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1170\"}'\'' -e'"" [2025-09-07 03:35:08][351376410488992][5053 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b372129-5f34-4558-ab03-8e0a59cd784f","id":"QR_0b372129-5f34-4558-ab03-8e0a59cd784f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:35:08][351376410488992][5209 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-07 03:35:08][351376410488992][5210 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-07 03:35:08][351376410488992][5210 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:35:11][351376410488992][0 ms][INFO] === Request start === [2025-09-07 03:35:11][351376410488992][1 ms][DEBUG] START check_scloud [2025-09-07 03:35:11][351376410488992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:35:11][351376410488992][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 19844 3039 24790452 143496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:35:11][351376410488992][325 ms][DEBUG] targetPkg: running [2025-09-07 03:35:11][351376410488992][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-07 03:35:11][351376410488992][325 ms][DEBUG] START check_boot_completed [2025-09-07 03:35:11][351376410488992][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:35:11][351376410488992][372 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 03:35:11][351376410488992][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:35:11][351376410488992][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 03:35:11][351376410488992][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 03:35:11][351376410488992][434 ms][DEBUG] rawBody.length=1160 [2025-09-07 03:35:11][351376410488992][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376410488992\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-09-07 03:35:11][351376410488992][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:35:11][351376410488992][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376410488992\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-09-07 03:35:15][351376410488992][4918 ms][DEBUG] proc_open done in 4483 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 03:35:15][351376410488992][4918 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-07 03:35:15][351376410488992][4918 ms][WARN] Detected error: Process with pid 19844 either refused to load frida-agent, or terminated during injectionProcess with pid 19844 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 03:35:15][351376410488992][4918 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 03:35:16][351376410488992][5167 ms][DEBUG] SU: done in 249 ms; outsystem 3388 3039 12612164 176384 ep_poll 0 S system_server\n [2025-09-07 03:35:16][351376410488992][5167 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 03:35:16][351376410488992][5308 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 03:35:16][351376410488992][5308 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 03:35:16][351376410488992][5308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 03:35:16][351376410488992][5433 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 03:35:16][351376410488992][5433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 03:35:16][351376410488992][5652 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 03:35:18][351376410488992][7667 ms][DEBUG] START check_boot_completed [2025-09-07 03:35:18][351376410488992][7667 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:35:18][351376410488992][7714 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 03:35:18][351376410488992][7714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:35:18][351376410488992][7776 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 03:35:18][351376410488992][7776 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 03:35:21][351376410488992][10791 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 03:35:21][351376410488992][10791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376410488992\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-09-07 03:35:28][351376410488992][17149 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bb8d6a1-454f-48ce-9130-45dff006eb01","id":"QR_6bb8d6a1-454f-48ce-9130-45dff006eb01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:35:28][351376410488992][17305 ms][DEBUG] proc_open done in 6514 ms; code=255; res.len=3343 [2025-09-07 03:35:28][351376410488992][17305 ms][DEBUG] END runCmdUntilRes#2 in 6514 ms [2025-09-07 03:35:28][351376410488992][17305 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:43:03][351978521792137][1 ms][INFO] === Request start === [2025-09-07 03:43:03][351978521792137][1 ms][DEBUG] START check_scloud [2025-09-07 03:43:03][351978521792137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:43:04][351978521792137][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23459 3039 23458240 128552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:43:04][351978521792137][311 ms][DEBUG] targetPkg: running [2025-09-07 03:43:04][351978521792137][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 03:43:04][351978521792137][311 ms][DEBUG] START check_boot_completed [2025-09-07 03:43:04][351978521792137][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:43:04][351978521792137][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 03:43:04][351978521792137][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:43:04][351978521792137][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 03:43:04][351978521792137][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 03:43:04][351978521792137][389 ms][DEBUG] rawBody.length=1150 [2025-09-07 03:43:04][351978521792137][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521792137\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1986\"}'\'' -e'"" [2025-09-07 03:43:04][351978521792137][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:43:04][351978521792137][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521792137\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1986\"}'\'' -e'"" [2025-09-07 03:43:09][351978521792137][5419 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d87fc41b-9b5b-43d2-a8c0-3ee094bcfb1a","id":"QR_d87fc41b-9b5b-43d2-a8c0-3ee094bcfb1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:43:09][351978521792137][5576 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 03:43:09][351978521792137][5576 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 03:43:09][351978521792137][5576 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:43:11][351978521792137][0 ms][INFO] === Request start === [2025-09-07 03:43:11][351978521792137][1 ms][DEBUG] START check_scloud [2025-09-07 03:43:11][351978521792137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:43:12][351978521792137][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 23459 3039 23634644 139352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:43:12][351978521792137][305 ms][DEBUG] targetPkg: running [2025-09-07 03:43:12][351978521792137][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 03:43:12][351978521792137][305 ms][DEBUG] START check_boot_completed [2025-09-07 03:43:12][351978521792137][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:43:12][351978521792137][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 03:43:12][351978521792137][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:43:12][351978521792137][385 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 03:43:12][351978521792137][385 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 03:43:12][351978521792137][385 ms][DEBUG] rawBody.length=1160 [2025-09-07 03:43:12][351978521792137][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521792137\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3178\"}'\'' -e'"" [2025-09-07 03:43:12][351978521792137][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:43:12][351978521792137][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521792137\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3178\"}'\'' -e'"" [2025-09-07 03:43:17][351978521792137][5648 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9f78684-0ee1-4245-b0a1-cb5c8e13f8ed","id":"QR_e9f78684-0ee1-4245-b0a1-cb5c8e13f8ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:43:17][351978521792137][5804 ms][DEBUG] proc_open done in 5419 ms; code=255; res.len=3343 [2025-09-07 03:43:17][351978521792137][5804 ms][DEBUG] END runCmdUntilRes#1 in 5419 ms [2025-09-07 03:43:17][351978521792137][5804 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:46:03][352303780215309][1 ms][INFO] === Request start === [2025-09-07 03:46:03][352303780215309][1 ms][DEBUG] START check_scloud [2025-09-07 03:46:03][352303780215309][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:46:03][352303780215309][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 23459 3039 23725972 150528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:46:03][352303780215309][309 ms][DEBUG] targetPkg: running [2025-09-07 03:46:03][352303780215309][309 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 03:46:03][352303780215309][309 ms][DEBUG] START check_boot_completed [2025-09-07 03:46:03][352303780215309][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:46:03][352303780215309][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 03:46:03][352303780215309][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:46:03][352303780215309][387 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 03:46:03][352303780215309][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 03:46:03][352303780215309][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 03:46:03][352303780215309][512 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2884\nsuccessfulTxPacketsPerSecond: 0.23151690662020633\nretriedTxPackets: 680\nretriedTxPacketsPerSecond: 0.0784803073288835\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2779\nsuccessfulRxPacketsPerSecond: 0.2001247836886529\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 03:46:03][352303780215309][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 03:46:05][352303780215309][1949 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.840/301.840/301.840/0.000 ms\n [2025-09-07 03:46:05][352303780215309][1949 ms][DEBUG] check_internet: online [2025-09-07 03:46:05][352303780215309][1949 ms][DEBUG] rawBody.length=1150 [2025-09-07 03:46:05][352303780215309][1949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303780215309\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2064\"}'\'' -e'"" [2025-09-07 03:46:05][352303780215309][1949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:46:05][352303780215309][1949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303780215309\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2064\"}'\'' -e'"" [2025-09-07 03:46:09][352303780215309][5604 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7e19515-5fca-40de-9ac9-b7d01473b261","id":"QR_d7e19515-5fca-40de-9ac9-b7d01473b261","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:46:09][352303780215309][5760 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-07 03:46:09][352303780215309][5760 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-07 03:46:09][352303780215309][5760 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 03:46:11][352303780215309][0 ms][INFO] === Request start === [2025-09-07 03:46:11][352303780215309][1 ms][DEBUG] START check_scloud [2025-09-07 03:46:11][352303780215309][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 03:46:11][352303780215309][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 23459 3039 23858332 160036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 03:46:11][352303780215309][264 ms][DEBUG] targetPkg: running [2025-09-07 03:46:11][352303780215309][264 ms][DEBUG] END check_scloud in 264 ms [2025-09-07 03:46:11][352303780215309][264 ms][DEBUG] START check_boot_completed [2025-09-07 03:46:11][352303780215309][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 03:46:11][352303780215309][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 03:46:11][352303780215309][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 03:46:11][352303780215309][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 03:46:11][352303780215309][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 03:46:11][352303780215309][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 03:46:11][352303780215309][451 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2884\nsuccessfulTxPacketsPerSecond: 0.23151690662020633\nretriedTxPackets: 680\nretriedTxPacketsPerSecond: 0.0784803073288835\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2779\nsuccessfulRxPacketsPerSecond: 0.2001247836886529\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 03:46:11][352303780215309][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 03:46:12][352303780215309][826 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=280 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 280.071/280.071/280.071/0.000 ms\n [2025-09-07 03:46:12][352303780215309][827 ms][DEBUG] check_internet: online [2025-09-07 03:46:12][352303780215309][827 ms][DEBUG] rawBody.length=1160 [2025-09-07 03:46:12][352303780215309][827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303780215309\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8806\"}'\'' -e'"" [2025-09-07 03:46:12][352303780215309][827 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 03:46:12][352303780215309][827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352303780215309\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8806\"}'\'' -e'"" [2025-09-07 03:46:17][352303780215309][5981 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ef83737-91e7-404f-b685-fc87d4dd6ba5","id":"QR_5ef83737-91e7-404f-b685-fc87d4dd6ba5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 03:46:17][352303780215309][6137 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-07 03:46:17][352303780215309][6138 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 03:46:17][352303780215309][6138 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:04:04][350524544905214][1 ms][INFO] === Request start === [2025-09-07 04:04:04][350524544905214][1 ms][DEBUG] START check_scloud [2025-09-07 04:04:04][350524544905214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:04:04][350524544905214][286 ms][DEBUG] SU: done in 284 ms; outu0_a118 23459 3039 23979152 170064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:04:04][350524544905214][286 ms][DEBUG] targetPkg: running [2025-09-07 04:04:04][350524544905214][286 ms][DEBUG] END check_scloud in 284 ms [2025-09-07 04:04:04][350524544905214][286 ms][DEBUG] START check_boot_completed [2025-09-07 04:04:04][350524544905214][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:04:04][350524544905214][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 04:04:04][350524544905214][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:04:04][350524544905214][379 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 04:04:04][350524544905214][379 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 04:04:04][350524544905214][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:04:04][350524544905214][519 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3080\nsuccessfulTxPacketsPerSecond: 0.013290361165564674\nretriedTxPackets: 753\nretriedTxPacketsPerSecond: 0.013290361165564674\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2964\nsuccessfulRxPacketsPerSecond: 0.013290361165564674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:04:04][350524544905214][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:04:06][350524544905214][1941 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.636/302.636/302.636/0.000 ms\n [2025-09-07 04:04:06][350524544905214][1941 ms][DEBUG] check_internet: online [2025-09-07 04:04:06][350524544905214][1941 ms][DEBUG] rawBody.length=1150 [2025-09-07 04:04:06][350524544905214][1941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524544905214\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8953\"}'\'' -e'"" [2025-09-07 04:04:06][350524544905214][1941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:04:06][350524544905214][1941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524544905214\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8953\"}'\'' -e'"" [2025-09-07 04:04:09][350524544905214][5659 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d403ad7a-6638-47fe-8c84-ae72fad8c926","id":"QR_d403ad7a-6638-47fe-8c84-ae72fad8c926","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:04:09][350524544905214][5815 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-07 04:04:09][350524544905214][5815 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-07 04:04:09][350524544905214][5815 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:04:12][350524544905214][0 ms][INFO] === Request start === [2025-09-07 04:04:12][350524544905214][1 ms][DEBUG] START check_scloud [2025-09-07 04:04:12][350524544905214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:04:12][350524544905214][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 23459 3039 24139172 180836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:04:12][350524544905214][302 ms][DEBUG] targetPkg: running [2025-09-07 04:04:12][350524544905214][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 04:04:12][350524544905214][302 ms][DEBUG] START check_boot_completed [2025-09-07 04:04:12][350524544905214][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:04:12][350524544905214][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 04:04:12][350524544905214][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:04:12][350524544905214][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 04:04:12][350524544905214][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 04:04:12][350524544905214][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:04:12][350524544905214][490 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3080\nsuccessfulTxPacketsPerSecond: 0.013290361165564674\nretriedTxPackets: 753\nretriedTxPacketsPerSecond: 0.013290361165564674\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2964\nsuccessfulRxPacketsPerSecond: 0.013290361165564674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:04:12][350524544905214][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:04:13][350524544905214][881 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.372/289.372/289.372/0.000 ms\n [2025-09-07 04:04:13][350524544905214][881 ms][DEBUG] check_internet: online [2025-09-07 04:04:13][350524544905214][881 ms][DEBUG] rawBody.length=1160 [2025-09-07 04:04:13][350524544905214][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524544905214\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2666\"}'\'' -e'"" [2025-09-07 04:04:13][350524544905214][881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:04:13][350524544905214][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524544905214\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2666\"}'\'' -e'"" [2025-09-07 04:04:18][350524544905214][6239 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6784d201-e479-4217-80cb-7d793cbe1c59","id":"QR_6784d201-e479-4217-80cb-7d793cbe1c59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:04:18][350524544905214][6395 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 04:04:18][350524544905214][6395 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 04:04:18][350524544905214][6395 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:09:04][351864711508477][1 ms][INFO] === Request start === [2025-09-07 04:09:04][351864711508477][1 ms][DEBUG] START check_scloud [2025-09-07 04:09:04][351864711508477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:09:05][351864711508477][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 23459 3039 24226212 179824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:09:05][351864711508477][304 ms][DEBUG] targetPkg: running [2025-09-07 04:09:05][351864711508477][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 04:09:05][351864711508477][304 ms][DEBUG] START check_boot_completed [2025-09-07 04:09:05][351864711508477][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:09:05][351864711508477][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 04:09:05][351864711508477][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:09:05][351864711508477][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 04:09:05][351864711508477][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 04:09:05][351864711508477][382 ms][DEBUG] rawBody.length=1160 [2025-09-07 04:09:05][351864711508477][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864711508477\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2789\"}'\'' -e'"" [2025-09-07 04:09:05][351864711508477][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:09:05][351864711508477][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864711508477\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2789\"}'\'' -e'"" [2025-09-07 04:09:11][351864711508477][6537 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7919a7b-9cae-4a6b-925e-0af97b5836a1","id":"QR_b7919a7b-9cae-4a6b-925e-0af97b5836a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:09:11][351864711508477][6693 ms][DEBUG] proc_open done in 6310 ms; code=255; res.len=3343 [2025-09-07 04:09:11][351864711508477][6693 ms][DEBUG] END runCmdUntilRes#1 in 6310 ms [2025-09-07 04:09:11][351864711508477][6693 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:14:03][350753205727514][1 ms][INFO] === Request start === [2025-09-07 04:14:03][350753205727514][1 ms][DEBUG] START check_scloud [2025-09-07 04:14:03][350753205727514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:14:04][350753205727514][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 23459 3039 24356360 184236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:14:04][350753205727514][315 ms][DEBUG] targetPkg: running [2025-09-07 04:14:04][350753205727514][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 04:14:04][350753205727514][315 ms][DEBUG] START check_boot_completed [2025-09-07 04:14:04][350753205727514][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:14:04][350753205727514][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 04:14:04][350753205727514][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:14:04][350753205727514][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 04:14:04][350753205727514][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 04:14:04][350753205727514][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:14:04][350753205727514][487 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3142\nsuccessfulTxPacketsPerSecond: 0.2059479084661199\nretriedTxPackets: 775\nretriedTxPacketsPerSecond: 0.07307829010088125\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3019\nsuccessfulRxPacketsPerSecond: 0.18269572525220315\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:14:04][350753205727514][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:14:05][350753205727514][1846 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.875/301.875/301.875/0.000 ms\n [2025-09-07 04:14:05][350753205727514][1846 ms][DEBUG] check_internet: online [2025-09-07 04:14:05][350753205727514][1846 ms][DEBUG] rawBody.length=1150 [2025-09-07 04:14:05][350753205727514][1846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753205727514\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7236\"}'\'' -e'"" [2025-09-07 04:14:05][350753205727514][1847 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:14:05][350753205727514][1847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753205727514\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7236\"}'\'' -e'"" [2025-09-07 04:14:09][350753205727514][5751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c743c53-ae4f-4b4c-a0be-5904412d5169","id":"QR_2c743c53-ae4f-4b4c-a0be-5904412d5169","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:14:09][350753205727514][5907 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-07 04:14:09][350753205727514][5907 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-07 04:14:09][350753205727514][5907 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:14:12][350753205727514][0 ms][INFO] === Request start === [2025-09-07 04:14:12][350753205727514][1 ms][DEBUG] START check_scloud [2025-09-07 04:14:12][350753205727514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:14:12][350753205727514][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 23459 3039 24485648 193420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:14:12][350753205727514][283 ms][DEBUG] targetPkg: running [2025-09-07 04:14:12][350753205727514][283 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 04:14:12][350753205727514][283 ms][DEBUG] START check_boot_completed [2025-09-07 04:14:12][350753205727514][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:14:12][350753205727514][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 04:14:12][350753205727514][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:14:12][350753205727514][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 04:14:12][350753205727514][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 04:14:12][350753205727514][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:14:12][350753205727514][486 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3182\nsuccessfulTxPacketsPerSecond: 0.1329340879558393\nretriedTxPackets: 790\nretriedTxPacketsPerSecond: 0.049850282983439735\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3051\nsuccessfulRxPacketsPerSecond: 0.10634727036467144\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:14:12][350753205727514][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:14:12][350753205727514][830 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.736/250.736/250.736/0.000 ms\n [2025-09-07 04:14:12][350753205727514][830 ms][DEBUG] check_internet: online [2025-09-07 04:14:12][350753205727514][830 ms][DEBUG] rawBody.length=1160 [2025-09-07 04:14:12][350753205727514][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753205727514\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2353\"}'\'' -e'"" [2025-09-07 04:14:12][350753205727514][830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:14:12][350753205727514][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753205727514\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2353\"}'\'' -e'"" [2025-09-07 04:14:18][350753205727514][5985 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33fc640e-5959-4cd8-b5a2-87eb9ec6f2f6","id":"QR_33fc640e-5959-4cd8-b5a2-87eb9ec6f2f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:14:18][350753205727514][6141 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 04:14:18][350753205727514][6141 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 04:14:18][350753205727514][6141 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:40:04][352460883660748][1 ms][INFO] === Request start === [2025-09-07 04:40:04][352460883660748][1 ms][DEBUG] START check_scloud [2025-09-07 04:40:04][352460883660748][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:40:05][352460883660748][264 ms][DEBUG] SU: done in 262 ms; outu0_a118 23459 3039 24588164 191948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:40:05][352460883660748][264 ms][DEBUG] targetPkg: running [2025-09-07 04:40:05][352460883660748][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-07 04:40:05][352460883660748][264 ms][DEBUG] START check_boot_completed [2025-09-07 04:40:05][352460883660748][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:40:05][352460883660748][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 04:40:05][352460883660748][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:40:05][352460883660748][373 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 04:40:05][352460883660748][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 04:40:05][352460883660748][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:40:05][352460883660748][529 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3437\nsuccessfulTxPacketsPerSecond: 0.053158265445798505\nretriedTxPackets: 847\nretriedTxPacketsPerSecond: 0.016611957951812032\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3322\nsuccessfulRxPacketsPerSecond: 0.0498358738554361\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:40:05][352460883660748][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:40:06][352460883660748][2138 ms][DEBUG] SU: done in 1609 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=406 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 406.169/406.169/406.169/0.000 ms\n [2025-09-07 04:40:06][352460883660748][2138 ms][DEBUG] check_internet: online [2025-09-07 04:40:06][352460883660748][2138 ms][DEBUG] rawBody.length=1160 [2025-09-07 04:40:06][352460883660748][2138 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460883660748\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MXD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1675\"}'\'' -e'"" [2025-09-07 04:40:06][352460883660748][2138 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:40:06][352460883660748][2138 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460883660748\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MXD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1675\"}'\'' -e'"" [2025-09-07 04:40:12][352460883660748][7402 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7865c6c-7c39-4961-bbf3-95528109eebd","id":"QR_d7865c6c-7c39-4961-bbf3-95528109eebd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:40:12][352460883660748][7559 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-07 04:40:12][352460883660748][7559 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-07 04:40:12][352460883660748][7559 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:40:15][352460883660748][0 ms][INFO] === Request start === [2025-09-07 04:40:15][352460883660748][1 ms][DEBUG] START check_scloud [2025-09-07 04:40:15][352460883660748][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:40:16][352460883660748][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 23459 3039 24733912 198640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:40:16][352460883660748][321 ms][DEBUG] targetPkg: running [2025-09-07 04:40:16][352460883660748][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 04:40:16][352460883660748][321 ms][DEBUG] START check_boot_completed [2025-09-07 04:40:16][352460883660748][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:40:16][352460883660748][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 04:40:16][352460883660748][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:40:16][352460883660748][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 04:40:16][352460883660748][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 04:40:16][352460883660748][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:40:16][352460883660748][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3437\nsuccessfulTxPacketsPerSecond: 0.053158265445798505\nretriedTxPackets: 847\nretriedTxPacketsPerSecond: 0.016611957951812032\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3322\nsuccessfulRxPacketsPerSecond: 0.0498358738554361\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:40:16][352460883660748][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:40:16][352460883660748][946 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.493/326.493/326.493/0.000 ms\n [2025-09-07 04:40:16][352460883660748][946 ms][DEBUG] check_internet: online [2025-09-07 04:40:16][352460883660748][946 ms][DEBUG] rawBody.length=1150 [2025-09-07 04:40:16][352460883660748][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460883660748\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MXD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4772\"}'\'' -e'"" [2025-09-07 04:40:16][352460883660748][946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:40:16][352460883660748][946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460883660748\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MXD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4772\"}'\'' -e'"" [2025-09-07 04:40:21][352460883660748][5384 ms][DEBUG] proc_open done in 4437 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 04:40:21][352460883660748][5384 ms][DEBUG] END runCmdUntilRes#1 in 4438 ms [2025-09-07 04:40:21][352460883660748][5384 ms][WARN] Detected error: Process with pid 23459 either refused to load frida-agent, or terminated during injectionProcess with pid 23459 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 04:40:21][352460883660748][5384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 04:40:21][352460883660748][5664 ms][DEBUG] SU: done in 280 ms; outsystem 3388 3039 12629600 180248 ep_poll 0 S system_server\n [2025-09-07 04:40:21][352460883660748][5664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 04:40:21][352460883660748][5804 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 04:40:21][352460883660748][5804 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 04:40:21][352460883660748][5805 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 04:40:21][352460883660748][5929 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 04:40:21][352460883660748][5929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 04:40:22][352460883660748][6179 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 04:40:24][352460883660748][8194 ms][DEBUG] START check_boot_completed [2025-09-07 04:40:24][352460883660748][8194 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:40:24][352460883660748][8241 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 04:40:24][352460883660748][8241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:40:24][352460883660748][8289 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 04:40:24][352460883660748][8290 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 04:40:27][352460883660748][11303 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 04:40:27][352460883660748][11303 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460883660748\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MXD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4772\"}'\'' -e'"" [2025-09-07 04:40:31][352460883660748][15349 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5266b29d-cff1-41ca-baab-cb739efba04c","id":"QR_5266b29d-cff1-41ca-baab-cb739efba04c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:40:31][352460883660748][15505 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-09-07 04:40:31][352460883660748][15505 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-09-07 04:40:31][352460883660748][15505 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:52:03][354505622273472][1 ms][INFO] === Request start === [2025-09-07 04:52:03][354505622273472][1 ms][DEBUG] START check_scloud [2025-09-07 04:52:03][354505622273472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:52:04][354505622273472][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 26662 3039 23483384 128184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:52:04][354505622273472][318 ms][DEBUG] targetPkg: running [2025-09-07 04:52:04][354505622273472][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 04:52:04][354505622273472][319 ms][DEBUG] START check_boot_completed [2025-09-07 04:52:04][354505622273472][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:52:04][354505622273472][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 04:52:04][354505622273472][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:52:04][354505622273472][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 04:52:04][354505622273472][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 04:52:04][354505622273472][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:52:04][354505622273472][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3514\nsuccessfulTxPacketsPerSecond: 0.011105743335165782\nretriedTxPackets: 877\nretriedTxPacketsPerSecond: 0.011105743335165782\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3390\nsuccessfulRxPacketsPerSecond: 0.011105743335165782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:52:04][354505622273472][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:52:05][354505622273472][1974 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.735/405.735/405.735/0.000 ms\n [2025-09-07 04:52:05][354505622273472][1974 ms][DEBUG] check_internet: online [2025-09-07 04:52:05][354505622273472][1974 ms][DEBUG] rawBody.length=1150 [2025-09-07 04:52:05][354505622273472][1974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622273472\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9061\"}'\'' -e'"" [2025-09-07 04:52:05][354505622273472][1974 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:52:05][354505622273472][1975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622273472\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9061\"}'\'' -e'"" [2025-09-07 04:52:09][354505622273472][6036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9becda41-fce7-4e40-9767-1bde6425c6a5","id":"QR_9becda41-fce7-4e40-9767-1bde6425c6a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:52:09][354505622273472][6192 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-07 04:52:09][354505622273472][6192 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-07 04:52:09][354505622273472][6192 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:52:12][354505622273472][0 ms][INFO] === Request start === [2025-09-07 04:52:12][354505622273472][1 ms][DEBUG] START check_scloud [2025-09-07 04:52:12][354505622273472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:52:12][354505622273472][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 26662 3039 23669068 140080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:52:12][354505622273472][322 ms][DEBUG] targetPkg: running [2025-09-07 04:52:12][354505622273472][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 04:52:12][354505622273472][322 ms][DEBUG] START check_boot_completed [2025-09-07 04:52:12][354505622273472][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:52:12][354505622273472][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 04:52:12][354505622273472][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:52:12][354505622273472][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 04:52:12][354505622273472][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 04:52:12][354505622273472][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 04:52:12][354505622273472][509 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3514\nsuccessfulTxPacketsPerSecond: 0.011105743335165782\nretriedTxPackets: 877\nretriedTxPacketsPerSecond: 0.011105743335165782\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3390\nsuccessfulRxPacketsPerSecond: 0.011105743335165782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 04:52:12][354505622273472][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 04:52:13][354505622273472][822 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.252/227.252/227.252/0.000 ms\n [2025-09-07 04:52:13][354505622273472][822 ms][DEBUG] check_internet: online [2025-09-07 04:52:13][354505622273472][822 ms][DEBUG] rawBody.length=1160 [2025-09-07 04:52:13][354505622273472][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622273472\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6609\"}'\'' -e'"" [2025-09-07 04:52:13][354505622273472][822 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:52:13][354505622273472][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505622273472\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6609\"}'\'' -e'"" [2025-09-07 04:52:18][354505622273472][6242 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_680c6b7c-4225-413a-9d15-d6497e7c151b","id":"QR_680c6b7c-4225-413a-9d15-d6497e7c151b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:52:18][354505622273472][6398 ms][DEBUG] proc_open done in 5576 ms; code=255; res.len=3343 [2025-09-07 04:52:18][354505622273472][6398 ms][DEBUG] END runCmdUntilRes#1 in 5576 ms [2025-09-07 04:52:18][354505622273472][6398 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:57:03][354588701058113][1 ms][INFO] === Request start === [2025-09-07 04:57:03][354588701058113][1 ms][DEBUG] START check_scloud [2025-09-07 04:57:03][354588701058113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:57:04][354588701058113][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 26662 3039 23791052 151348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:57:04][354588701058113][316 ms][DEBUG] targetPkg: running [2025-09-07 04:57:04][354588701058113][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 04:57:04][354588701058113][316 ms][DEBUG] START check_boot_completed [2025-09-07 04:57:04][354588701058113][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:57:04][354588701058113][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 04:57:04][354588701058113][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:57:04][354588701058113][395 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 04:57:04][354588701058113][395 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 04:57:04][354588701058113][395 ms][DEBUG] rawBody.length=1150 [2025-09-07 04:57:04][354588701058113][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9269\"}'\'' -e'"" [2025-09-07 04:57:04][354588701058113][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:57:04][354588701058113][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9269\"}'\'' -e'"" [2025-09-07 04:57:08][354588701058113][4986 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc79f7e3-c2f0-4dab-b8c3-affa2d68a3c4","id":"QR_dc79f7e3-c2f0-4dab-b8c3-affa2d68a3c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:57:08][354588701058113][5142 ms][DEBUG] proc_open done in 4747 ms; code=255; res.len=3343 [2025-09-07 04:57:08][354588701058113][5142 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-07 04:57:08][354588701058113][5142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 04:57:11][354588701058113][0 ms][INFO] === Request start === [2025-09-07 04:57:11][354588701058113][1 ms][DEBUG] START check_scloud [2025-09-07 04:57:11][354588701058113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 04:57:11][354588701058113][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 26662 3039 23929620 162212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 04:57:11][354588701058113][303 ms][DEBUG] targetPkg: running [2025-09-07 04:57:11][354588701058113][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 04:57:11][354588701058113][303 ms][DEBUG] START check_boot_completed [2025-09-07 04:57:11][354588701058113][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 04:57:11][354588701058113][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 04:57:11][354588701058113][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 04:57:11][354588701058113][382 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 04:57:11][354588701058113][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 04:57:11][354588701058113][382 ms][DEBUG] rawBody.length=1160 [2025-09-07 04:57:11][354588701058113][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9518\"}'\'' -e'"" [2025-09-07 04:57:11][354588701058113][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 04:57:11][354588701058113][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9518\"}'\'' -e'"" [2025-09-07 04:57:16][354588701058113][5395 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d222295-1f45-43da-a31b-e4ba04c7e14a","id":"QR_1d222295-1f45-43da-a31b-e4ba04c7e14a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 04:57:16][354588701058113][5551 ms][DEBUG] proc_open done in 5169 ms; code=255; res.len=3343 [2025-09-07 04:57:16][354588701058113][5552 ms][DEBUG] END runCmdUntilRes#1 in 5169 ms [2025-09-07 04:57:16][354588701058113][5552 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 05:15:03][353370807484746][1 ms][INFO] === Request start === [2025-09-07 05:15:03][353370807484746][1 ms][DEBUG] START check_scloud [2025-09-07 05:15:03][353370807484746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:15:03][353370807484746][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 26662 3039 24038152 160620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 05:15:03][353370807484746][245 ms][DEBUG] targetPkg: running [2025-09-07 05:15:03][353370807484746][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-07 05:15:03][353370807484746][245 ms][DEBUG] START check_boot_completed [2025-09-07 05:15:03][353370807484746][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:15:03][353370807484746][277 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 05:15:03][353370807484746][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:15:03][353370807484746][325 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 05:15:03][353370807484746][325 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 05:15:03][353370807484746][325 ms][DEBUG] rawBody.length=1150 [2025-09-07 05:15:03][353370807484746][325 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353370807484746\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3505\"}'\'' -e'"" [2025-09-07 05:15:03][353370807484746][325 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:15:03][353370807484746][325 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353370807484746\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3505\"}'\'' -e'"" [2025-09-07 05:15:08][353370807484746][5416 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 05:15:08][353370807484746][5572 ms][DEBUG] proc_open done in 5247 ms; code=255; res.len=115 [2025-09-07 05:15:08][353370807484746][5572 ms][DEBUG] END runCmdUntilRes#1 in 5247 ms [2025-09-07 05:15:08][353370807484746][5572 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 05:15:09][][0 ms][INFO] === Request start === [2025-09-07 05:15:09][][1 ms][DEBUG] START check_scloud [2025-09-07 05:15:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:15:09][][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 26662 3039 24224860 165144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 05:15:09][][304 ms][DEBUG] targetPkg: running [2025-09-07 05:15:09][][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 05:15:09][][304 ms][DEBUG] START check_boot_completed [2025-09-07 05:15:09][][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:15:09][][350 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 05:15:09][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:15:09][][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 05:15:09][][412 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 05:15:09][][412 ms][DEBUG] rawBody.length=1131 [2025-09-07 05:15:09][][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCW60072AD\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6455\"}'\'' -e'"" [2025-09-07 05:15:09][][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:15:09][][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCW60072AD\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6455\"}'\'' -e'"" [2025-09-07 05:15:12][][3583 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 05:15:12][][3739 ms][DEBUG] proc_open done in 3327 ms; code=255; res.len=115 [2025-09-07 05:15:12][][3740 ms][DEBUG] END runCmdUntilRes#1 in 3327 ms [2025-09-07 05:15:12][][3740 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 05:15:14][353370807484746][1 ms][INFO] === Request start === [2025-09-07 05:15:14][353370807484746][1 ms][DEBUG] START check_scloud [2025-09-07 05:15:14][353370807484746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:15:14][353370807484746][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 26662 3039 24403812 175808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 05:15:14][353370807484746][313 ms][DEBUG] targetPkg: running [2025-09-07 05:15:14][353370807484746][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 05:15:14][353370807484746][313 ms][DEBUG] START check_boot_completed [2025-09-07 05:15:14][353370807484746][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:15:14][353370807484746][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 05:15:14][353370807484746][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:15:14][353370807484746][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 05:15:14][353370807484746][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 05:15:14][353370807484746][406 ms][DEBUG] rawBody.length=1160 [2025-09-07 05:15:14][353370807484746][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353370807484746\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7665\"}'\'' -e'"" [2025-09-07 05:15:14][353370807484746][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:15:14][353370807484746][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353370807484746\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7665\"}'\'' -e'"" [2025-09-07 05:15:20][353370807484746][5686 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_687d6452-dfad-4556-9de2-c1c402bdb040","id":"QR_687d6452-dfad-4556-9de2-c1c402bdb040","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 05:15:20][353370807484746][5843 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-07 05:15:20][353370807484746][5843 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-07 05:15:20][353370807484746][5843 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 05:28:03][351828112854228][1 ms][INFO] === Request start === [2025-09-07 05:28:03][351828112854228][1 ms][DEBUG] START check_scloud [2025-09-07 05:28:03][351828112854228][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:28:03][351828112854228][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 26662 3039 24514484 188100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 05:28:03][351828112854228][298 ms][DEBUG] targetPkg: running [2025-09-07 05:28:03][351828112854228][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 05:28:03][351828112854228][298 ms][DEBUG] START check_boot_completed [2025-09-07 05:28:03][351828112854228][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:28:03][351828112854228][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 05:28:03][351828112854228][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:28:03][351828112854228][378 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 05:28:03][351828112854228][378 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 05:28:03][351828112854228][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 05:28:03][351828112854228][501 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3910\nsuccessfulTxPacketsPerSecond: 0.042275322918428136\nretriedTxPackets: 1007\nretriedTxPacketsPerSecond: 0.039023375001625976\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3739\nsuccessfulRxPacketsPerSecond: 0.02276363541761515\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 05:28:03][351828112854228][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 05:28:05][351828112854228][1845 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.684/304.684/304.684/0.000 ms\n [2025-09-07 05:28:05][351828112854228][1845 ms][DEBUG] check_internet: online [2025-09-07 05:28:05][351828112854228][1845 ms][DEBUG] rawBody.length=1150 [2025-09-07 05:28:05][351828112854228][1845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112854228\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GLB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5010\"}'\'' -e'"" [2025-09-07 05:28:05][351828112854228][1845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:28:05][351828112854228][1845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112854228\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GLB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5010\"}'\'' -e'"" [2025-09-07 05:28:08][351828112854228][5656 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_002da75d-d892-4ee8-a6c2-f7680df00122","id":"QR_002da75d-d892-4ee8-a6c2-f7680df00122","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 05:28:09][351828112854228][5812 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-07 05:28:09][351828112854228][5812 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-07 05:28:09][351828112854228][5812 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 05:28:11][351828112854228][0 ms][INFO] === Request start === [2025-09-07 05:28:11][351828112854228][1 ms][DEBUG] START check_scloud [2025-09-07 05:28:11][351828112854228][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:28:11][351828112854228][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 26662 3039 24656136 198876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 05:28:11][351828112854228][304 ms][DEBUG] targetPkg: running [2025-09-07 05:28:11][351828112854228][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 05:28:11][351828112854228][304 ms][DEBUG] START check_boot_completed [2025-09-07 05:28:11][351828112854228][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:28:11][351828112854228][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 05:28:11][351828112854228][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:28:11][351828112854228][398 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 05:28:11][351828112854228][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 05:28:11][351828112854228][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 05:28:11][351828112854228][553 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=21118515 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3910\nsuccessfulTxPacketsPerSecond: 0.042275322918428136\nretriedTxPackets: 1007\nretriedTxPacketsPerSecond: 0.039023375001625976\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3739\nsuccessfulRxPacketsPerSecond: 0.02276363541761515\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 05:28:11][351828112854228][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 05:28:12][351828112854228][1006 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.009/336.009/336.009/0.000 ms\n [2025-09-07 05:28:12][351828112854228][1007 ms][DEBUG] check_internet: online [2025-09-07 05:28:12][351828112854228][1007 ms][DEBUG] rawBody.length=1160 [2025-09-07 05:28:12][351828112854228][1007 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112854228\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GLB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8535\"}'\'' -e'"" [2025-09-07 05:28:12][351828112854228][1007 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:28:12][351828112854228][1007 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112854228\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GLB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8535\"}'\'' -e'"" [2025-09-07 05:28:17][351828112854228][6161 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a7dc789-0ca4-4805-9c7d-61b71ead7a15","id":"QR_2a7dc789-0ca4-4805-9c7d-61b71ead7a15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 05:28:17][351828112854228][6318 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 05:28:17][351828112854228][6318 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 05:28:17][351828112854228][6318 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 05:49:05][353817440570125][1 ms][INFO] === Request start === [2025-09-07 05:49:05][353817440570125][1 ms][DEBUG] START check_scloud [2025-09-07 05:49:05][353817440570125][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:49:05][353817440570125][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 26662 3039 24762752 210984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 05:49:05][353817440570125][288 ms][DEBUG] targetPkg: running [2025-09-07 05:49:05][353817440570125][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 05:49:05][353817440570125][288 ms][DEBUG] START check_boot_completed [2025-09-07 05:49:05][353817440570125][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:49:05][353817440570125][318 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 05:49:05][353817440570125][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:49:05][353817440570125][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 05:49:05][353817440570125][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 05:49:05][353817440570125][366 ms][DEBUG] rawBody.length=1150 [2025-09-07 05:49:05][353817440570125][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353817440570125\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1172\"}'\'' -e'"" [2025-09-07 05:49:05][353817440570125][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:49:05][353817440570125][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353817440570125\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1172\"}'\'' -e'"" [2025-09-07 05:49:10][353817440570125][5411 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bc1374e-935a-4038-bade-9fe1f616d1bf","id":"QR_4bc1374e-935a-4038-bade-9fe1f616d1bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 05:49:10][353817440570125][5567 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 05:49:10][353817440570125][5567 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 05:49:10][353817440570125][5567 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 05:49:14][353817440570125][0 ms][INFO] === Request start === [2025-09-07 05:49:14][353817440570125][1 ms][DEBUG] START check_scloud [2025-09-07 05:49:14][353817440570125][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:49:14][353817440570125][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 26662 3039 24951508 222748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 05:49:14][353817440570125][304 ms][DEBUG] targetPkg: running [2025-09-07 05:49:14][353817440570125][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 05:49:14][353817440570125][304 ms][DEBUG] START check_boot_completed [2025-09-07 05:49:14][353817440570125][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:49:14][353817440570125][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 05:49:14][353817440570125][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:49:14][353817440570125][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 05:49:14][353817440570125][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 05:49:14][353817440570125][398 ms][DEBUG] rawBody.length=1160 [2025-09-07 05:49:14][353817440570125][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353817440570125\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-09-07 05:49:14][353817440570125][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:49:14][353817440570125][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353817440570125\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-09-07 05:49:22][353817440570125][8489 ms][DEBUG] proc_open done in 8091 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 05:49:22][353817440570125][8489 ms][DEBUG] END runCmdUntilRes#1 in 8091 ms [2025-09-07 05:49:22][353817440570125][8489 ms][WARN] Detected error: Process with pid 26662 either refused to load frida-agent, or terminated during injectionProcess with pid 26662 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 05:49:22][353817440570125][8489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 05:49:23][353817440570125][8787 ms][DEBUG] SU: done in 297 ms; out [2025-09-07 05:49:23][353817440570125][8787 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 05:49:23][353817440570125][9068 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 05:49:23][353817440570125][9068 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 05:49:23][353817440570125][9068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 05:49:23][353817440570125][9380 ms][DEBUG] SU: done in 312 ms; out [2025-09-07 05:49:23][353817440570125][9380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 05:49:23][353817440570125][9676 ms][DEBUG] SU: done in 297 ms; out [2025-09-07 05:49:25][353817440570125][11692 ms][DEBUG] START check_boot_completed [2025-09-07 05:49:25][353817440570125][11692 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:49:26][353817440570125][11739 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 05:49:26][353817440570125][11739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:49:26][353817440570125][11801 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 05:49:26][353817440570125][11801 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 05:49:29][353817440570125][14816 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 05:49:29][353817440570125][14816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353817440570125\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-09-07 05:49:30][353817440570125][16300 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 05:49:30][353817440570125][16300 ms][DEBUG] END runCmdUntilRes#2 in 1485 ms [2025-09-07 05:49:30][353817440570125][16300 ms][WARN] Detected error 2; Reboot the device [2025-09-07 05:49:30][353817440570125][16300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 05:49:30][353817440570125][16550 ms][DEBUG] SU: done in 249 ms; outsystem 30293 29949 7294172 126432 0 0 R system_server\n [2025-09-07 05:49:30][353817440570125][16550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 05:49:31][353817440570125][17175 ms][DEBUG] SU: done in 625 ms; out [2025-09-07 05:53:05][354082110739976][1 ms][INFO] === Request start === [2025-09-07 05:53:05][354082110739976][1 ms][DEBUG] START check_scloud [2025-09-07 05:53:05][354082110739976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 05:53:05][354082110739976][360 ms][DEBUG] SU: done in 358 ms; out [2025-09-07 05:53:05][354082110739976][360 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 05:53:05][354082110739976][406 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 05:53:05][354082110739976][406 ms][DEBUG] check_devices: device found [2025-09-07 05:53:05][354082110739976][407 ms][WARN] targetPkg: not running, restarting [2025-09-07 05:53:05][354082110739976][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 05:53:05][354082110739976][516 ms][DEBUG] SU: done in 109 ms; out [2025-09-07 05:53:05][354082110739976][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 05:53:05][354082110739976][719 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 05:53:07][354082110739976][2734 ms][DEBUG] END check_scloud in 2733 ms [2025-09-07 05:53:07][354082110739976][2734 ms][DEBUG] START check_boot_completed [2025-09-07 05:53:07][354082110739976][2734 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 05:53:07][354082110739976][2781 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 05:53:07][354082110739976][2781 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 05:53:07][354082110739976][2843 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 05:53:07][354082110739976][2843 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 05:53:07][354082110739976][2843 ms][DEBUG] rawBody.length=1160 [2025-09-07 05:53:07][354082110739976][2843 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354082110739976\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W502NMNE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2144\"}'\'' -e'"" [2025-09-07 05:53:07][354082110739976][2844 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 05:53:07][354082110739976][2844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354082110739976\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W502NMNE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2144\"}'\'' -e'"" [2025-09-07 05:53:12][354082110739976][7468 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_727ced2d-06e2-4eb0-93e5-522d46f58bf3","id":"QR_727ced2d-06e2-4eb0-93e5-522d46f58bf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 05:53:12][354082110739976][7624 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-07 05:53:12][354082110739976][7624 ms][DEBUG] END runCmdUntilRes#1 in 4781 ms [2025-09-07 05:53:12][354082110739976][7624 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:20:03][352660830138835][1 ms][INFO] === Request start === [2025-09-07 06:20:03][352660830138835][1 ms][DEBUG] START check_scloud [2025-09-07 06:20:03][352660830138835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:20:04][352660830138835][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 15459 4967 23558336 112744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:20:04][352660830138835][319 ms][DEBUG] targetPkg: running [2025-09-07 06:20:04][352660830138835][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 06:20:04][352660830138835][319 ms][DEBUG] START check_boot_completed [2025-09-07 06:20:04][352660830138835][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:20:04][352660830138835][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:20:04][352660830138835][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:20:04][352660830138835][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:20:04][352660830138835][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:20:04][352660830138835][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:20:04][352660830138835][507 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1017\nsuccessfulTxPacketsPerSecond: 0.017306727124833422\nretriedTxPackets: 159\nretriedTxPacketsPerSecond: 0.017306727124833422\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1048\nsuccessfulRxPacketsPerSecond: 0.017306727124833422\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:20:04][352660830138835][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:20:05][352660830138835][2069 ms][DEBUG] SU: done in 1562 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.501/300.501/300.501/0.000 ms\n [2025-09-07 06:20:05][352660830138835][2069 ms][DEBUG] check_internet: online [2025-09-07 06:20:05][352660830138835][2069 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:20:05][352660830138835][2069 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830138835\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5915\"}'\'' -e'"" [2025-09-07 06:20:05][352660830138835][2069 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:20:05][352660830138835][2069 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830138835\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5915\"}'\'' -e'"" [2025-09-07 06:20:09][352660830138835][6239 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb2d82b6-a4f0-4ec2-ad38-9a1a3699da53","id":"QR_cb2d82b6-a4f0-4ec2-ad38-9a1a3699da53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:20:10][352660830138835][6396 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-09-07 06:20:10][352660830138835][6396 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-07 06:20:10][352660830138835][6396 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:20:12][352660830138835][0 ms][INFO] === Request start === [2025-09-07 06:20:12][352660830138835][1 ms][DEBUG] START check_scloud [2025-09-07 06:20:12][352660830138835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:20:12][352660830138835][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 15459 4967 23708180 123948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:20:12][352660830138835][303 ms][DEBUG] targetPkg: running [2025-09-07 06:20:12][352660830138835][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 06:20:12][352660830138835][303 ms][DEBUG] START check_boot_completed [2025-09-07 06:20:12][352660830138835][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:20:12][352660830138835][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:20:12][352660830138835][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:20:12][352660830138835][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 06:20:12][352660830138835][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 06:20:12][352660830138835][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:20:13][352660830138835][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1017\nsuccessfulTxPacketsPerSecond: 0.017306727124833422\nretriedTxPackets: 159\nretriedTxPacketsPerSecond: 0.017306727124833422\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1048\nsuccessfulRxPacketsPerSecond: 0.017306727124833422\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:20:13][352660830138835][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:20:13][352660830138835][913 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.401/290.401/290.401/0.000 ms\n [2025-09-07 06:20:13][352660830138835][913 ms][DEBUG] check_internet: online [2025-09-07 06:20:13][352660830138835][913 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:20:13][352660830138835][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830138835\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6683\"}'\'' -e'"" [2025-09-07 06:20:13][352660830138835][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:20:13][352660830138835][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830138835\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6683\"}'\'' -e'"" [2025-09-07 06:20:19][352660830138835][6677 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc53a49f-99ab-4db6-8993-d3cb3548f93c","id":"QR_bc53a49f-99ab-4db6-8993-d3cb3548f93c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:20:19][352660830138835][6833 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-07 06:20:19][352660830138835][6833 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-07 06:20:19][352660830138835][6833 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:22:03][351240641609273][0 ms][INFO] === Request start === [2025-09-07 06:22:03][351240641609273][1 ms][DEBUG] START check_scloud [2025-09-07 06:22:03][351240641609273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:22:03][351240641609273][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 15459 4967 23813780 128512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:22:03][351240641609273][263 ms][DEBUG] targetPkg: running [2025-09-07 06:22:03][351240641609273][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 06:22:03][351240641609273][263 ms][DEBUG] START check_boot_completed [2025-09-07 06:22:03][351240641609273][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:22:03][351240641609273][294 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:22:03][351240641609273][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:22:03][351240641609273][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:22:03][351240641609273][342 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 06:22:03][351240641609273][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:22:03][351240641609273][482 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1017\nsuccessfulTxPacketsPerSecond: 0.017306727124833422\nretriedTxPackets: 159\nretriedTxPacketsPerSecond: 0.017306727124833422\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1048\nsuccessfulRxPacketsPerSecond: 0.017306727124833422\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:22:03][351240641609273][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:22:04][351240641609273][842 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.097/267.097/267.097/0.000 ms\n [2025-09-07 06:22:04][351240641609273][843 ms][DEBUG] check_internet: online [2025-09-07 06:22:04][351240641609273][843 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:22:04][351240641609273][843 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641609273\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2647\"}'\'' -e'"" [2025-09-07 06:22:04][351240641609273][843 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:22:04][351240641609273][843 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641609273\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2647\"}'\'' -e'"" [2025-09-07 06:22:08][351240641609273][5418 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3962d3d-c55e-42cf-961d-be380fc27837","id":"QR_f3962d3d-c55e-42cf-961d-be380fc27837","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:22:09][351240641609273][5574 ms][DEBUG] proc_open done in 4731 ms; code=255; res.len=3343 [2025-09-07 06:22:09][351240641609273][5574 ms][DEBUG] END runCmdUntilRes#1 in 4732 ms [2025-09-07 06:22:09][351240641609273][5574 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:22:11][351240641609273][1 ms][INFO] === Request start === [2025-09-07 06:22:11][351240641609273][1 ms][DEBUG] START check_scloud [2025-09-07 06:22:11][351240641609273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:22:11][351240641609273][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 15459 4967 23991196 137160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:22:11][351240641609273][300 ms][DEBUG] targetPkg: running [2025-09-07 06:22:11][351240641609273][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 06:22:11][351240641609273][300 ms][DEBUG] START check_boot_completed [2025-09-07 06:22:11][351240641609273][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:22:11][351240641609273][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:22:11][351240641609273][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:22:11][351240641609273][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:22:11][351240641609273][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:22:11][351240641609273][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:22:11][351240641609273][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1017\nsuccessfulTxPacketsPerSecond: 0.017306727124833422\nretriedTxPackets: 159\nretriedTxPacketsPerSecond: 0.017306727124833422\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1048\nsuccessfulRxPacketsPerSecond: 0.017306727124833422\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:22:11][351240641609273][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:22:12][351240641609273][817 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.904/226.904/226.904/0.000 ms\n [2025-09-07 06:22:12][351240641609273][817 ms][DEBUG] check_internet: online [2025-09-07 06:22:12][351240641609273][817 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:22:12][351240641609273][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641609273\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6610\"}'\'' -e'"" [2025-09-07 06:22:12][351240641609273][817 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:22:12][351240641609273][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641609273\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6610\"}'\'' -e'"" [2025-09-07 06:22:17][351240641609273][5940 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b19fe767-fb2b-4bd2-a27a-8a3068330939","id":"QR_b19fe767-fb2b-4bd2-a27a-8a3068330939","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:22:17][351240641609273][6096 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-07 06:22:17][351240641609273][6096 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-09-07 06:22:17][351240641609273][6096 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:26:03][354068195689152][1 ms][INFO] === Request start === [2025-09-07 06:26:03][354068195689152][1 ms][DEBUG] START check_scloud [2025-09-07 06:26:03][354068195689152][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:26:03][354068195689152][259 ms][DEBUG] SU: done in 257 ms; outu0_a118 15459 4967 24080348 149068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:26:03][354068195689152][259 ms][DEBUG] targetPkg: running [2025-09-07 06:26:03][354068195689152][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 06:26:03][354068195689152][259 ms][DEBUG] START check_boot_completed [2025-09-07 06:26:03][354068195689152][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:26:03][354068195689152][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:26:03][354068195689152][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:26:03][354068195689152][338 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 06:26:03][354068195689152][338 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 06:26:03][354068195689152][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:26:03][354068195689152][462 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1346\nsuccessfulTxPacketsPerSecond: 1.0755676152802525\nretriedTxPackets: 207\nretriedTxPacketsPerSecond: 0.15692171894666296\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1343\nsuccessfulRxPacketsPerSecond: 0.9644147310263661\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:26:03][354068195689152][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:26:05][354068195689152][1868 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.516/303.516/303.516/0.000 ms\n [2025-09-07 06:26:05][354068195689152][1868 ms][DEBUG] check_internet: online [2025-09-07 06:26:05][354068195689152][1868 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:26:05][354068195689152][1868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195689152\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6153\"}'\'' -e'"" [2025-09-07 06:26:05][354068195689152][1868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:26:05][354068195689152][1868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195689152\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6153\"}'\'' -e'"" [2025-09-07 06:26:09][354068195689152][5960 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e75919c9-00ec-4f65-bd6d-22b073116b12","id":"QR_e75919c9-00ec-4f65-bd6d-22b073116b12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:26:09][354068195689152][6117 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-07 06:26:09][354068195689152][6117 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-07 06:26:09][354068195689152][6117 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:26:11][354068195689152][0 ms][INFO] === Request start === [2025-09-07 06:26:11][354068195689152][1 ms][DEBUG] START check_scloud [2025-09-07 06:26:11][354068195689152][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:26:11][354068195689152][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 15459 4967 24253604 159616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:26:11][354068195689152][307 ms][DEBUG] targetPkg: running [2025-09-07 06:26:11][354068195689152][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 06:26:11][354068195689152][307 ms][DEBUG] START check_boot_completed [2025-09-07 06:26:11][354068195689152][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:26:12][354068195689152][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 06:26:12][354068195689152][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:26:12][354068195689152][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:26:12][354068195689152][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 06:26:12][354068195689152][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:26:12][354068195689152][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1346\nsuccessfulTxPacketsPerSecond: 1.0755676152802525\nretriedTxPackets: 207\nretriedTxPacketsPerSecond: 0.15692171894666296\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1343\nsuccessfulRxPacketsPerSecond: 0.9644147310263661\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:26:12][354068195689152][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:26:12][354068195689152][932 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.923/321.923/321.923/0.000 ms\n [2025-09-07 06:26:12][354068195689152][932 ms][DEBUG] check_internet: online [2025-09-07 06:26:12][354068195689152][932 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:26:12][354068195689152][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195689152\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7862\"}'\'' -e'"" [2025-09-07 06:26:12][354068195689152][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:26:12][354068195689152][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195689152\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7862\"}'\'' -e'"" [2025-09-07 06:26:17][354068195689152][5977 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da4663dd-edc3-4216-a173-439751e351dd","id":"QR_da4663dd-edc3-4216-a173-439751e351dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:26:17][354068195689152][6133 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-07 06:26:17][354068195689152][6133 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-07 06:26:17][354068195689152][6133 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:31:04][350655882938894][0 ms][INFO] === Request start === [2025-09-07 06:31:04][350655882938894][0 ms][DEBUG] START check_scloud [2025-09-07 06:31:04][350655882938894][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:31:04][350655882938894][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 15459 4967 24398180 146904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:31:04][350655882938894][288 ms][DEBUG] targetPkg: running [2025-09-07 06:31:04][350655882938894][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 06:31:04][350655882938894][288 ms][DEBUG] START check_boot_completed [2025-09-07 06:31:04][350655882938894][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:31:04][350655882938894][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:31:04][350655882938894][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:31:04][350655882938894][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:31:04][350655882938894][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:31:04][350655882938894][366 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:31:04][350655882938894][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882938894\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5664\"}'\'' -e'"" [2025-09-07 06:31:04][350655882938894][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:31:04][350655882938894][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882938894\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5664\"}'\'' -e'"" [2025-09-07 06:31:10][350655882938894][6396 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d56a523-6bd8-43a2-9518-9da5c767f925","id":"QR_9d56a523-6bd8-43a2-9518-9da5c767f925","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:31:11][350655882938894][6552 ms][DEBUG] proc_open done in 6186 ms; code=255; res.len=3343 [2025-09-07 06:31:11][350655882938894][6552 ms][DEBUG] END runCmdUntilRes#1 in 6186 ms [2025-09-07 06:31:11][350655882938894][6552 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:31:14][350655882938894][0 ms][INFO] === Request start === [2025-09-07 06:31:14][350655882938894][1 ms][DEBUG] START check_scloud [2025-09-07 06:31:14][350655882938894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:31:14][350655882938894][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 15459 4967 24544748 144008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:31:14][350655882938894][322 ms][DEBUG] targetPkg: running [2025-09-07 06:31:14][350655882938894][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 06:31:14][350655882938894][322 ms][DEBUG] START check_boot_completed [2025-09-07 06:31:14][350655882938894][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:31:14][350655882938894][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:31:14][350655882938894][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:31:14][350655882938894][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:31:14][350655882938894][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:31:14][350655882938894][400 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:31:14][350655882938894][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882938894\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3711\"}'\'' -e'"" [2025-09-07 06:31:14][350655882938894][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:31:14][350655882938894][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882938894\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3711\"}'\'' -e'"" [2025-09-07 06:31:18][350655882938894][4102 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fadf24d-4de6-44cb-a7a4-aa25b674843f","id":"QR_7fadf24d-4de6-44cb-a7a4-aa25b674843f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:31:18][350655882938894][4259 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-07 06:31:18][350655882938894][4259 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-07 06:31:18][350655882938894][4259 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:32:05][356380561794146][0 ms][INFO] === Request start === [2025-09-07 06:32:05][356380561794146][1 ms][DEBUG] START check_scloud [2025-09-07 06:32:05][356380561794146][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:32:05][356380561794146][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 15459 4967 24685228 156088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:32:05][356380561794146][296 ms][DEBUG] targetPkg: running [2025-09-07 06:32:05][356380561794146][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 06:32:05][356380561794146][296 ms][DEBUG] START check_boot_completed [2025-09-07 06:32:05][356380561794146][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:32:05][356380561794146][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:32:05][356380561794146][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:32:05][356380561794146][376 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 06:32:05][356380561794146][376 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 06:32:05][356380561794146][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:32:05][356380561794146][531 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1474\nsuccessfulTxPacketsPerSecond: 0.21504325301793656\nretriedTxPackets: 251\nretriedTxPacketsPerSecond: 0.07168108433931218\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1445\nsuccessfulRxPacketsPerSecond: 0.1629115553166186\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:32:05][356380561794146][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:32:07][356380561794146][1984 ms][DEBUG] SU: done in 1452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.208/299.208/299.208/0.000 ms\n [2025-09-07 06:32:07][356380561794146][1984 ms][DEBUG] check_internet: online [2025-09-07 06:32:07][356380561794146][1984 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:32:07][356380561794146][1984 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561794146\",\"model\":\"SM-S921W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1195\"}'\'' -e'"" [2025-09-07 06:32:07][356380561794146][1984 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:32:07][356380561794146][1984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561794146\",\"model\":\"SM-S921W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1195\"}'\'' -e'"" [2025-09-07 06:32:12][356380561794146][7029 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5394d0c5-26f4-42b4-bea6-2e81cbe5d676","id":"QR_5394d0c5-26f4-42b4-bea6-2e81cbe5d676","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:32:12][356380561794146][7185 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 06:32:12][356380561794146][7185 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 06:32:12][356380561794146][7185 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:32:15][356380561794146][0 ms][INFO] === Request start === [2025-09-07 06:32:15][356380561794146][1 ms][DEBUG] START check_scloud [2025-09-07 06:32:15][356380561794146][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:32:16][356380561794146][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 15459 4967 24860468 166768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:32:16][356380561794146][248 ms][DEBUG] targetPkg: running [2025-09-07 06:32:16][356380561794146][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-07 06:32:16][356380561794146][248 ms][DEBUG] START check_boot_completed [2025-09-07 06:32:16][356380561794146][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:32:16][356380561794146][279 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:32:16][356380561794146][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:32:16][356380561794146][326 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:32:16][356380561794146][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:32:16][356380561794146][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:32:16][356380561794146][436 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1474\nsuccessfulTxPacketsPerSecond: 0.21504325301793656\nretriedTxPackets: 251\nretriedTxPacketsPerSecond: 0.07168108433931218\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1445\nsuccessfulRxPacketsPerSecond: 0.1629115553166186\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:32:16][356380561794146][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:32:16][356380561794146][811 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.857/279.857/279.857/0.000 ms\n [2025-09-07 06:32:16][356380561794146][811 ms][DEBUG] check_internet: online [2025-09-07 06:32:16][356380561794146][811 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:32:16][356380561794146][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561794146\",\"model\":\"SM-S921W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3351\"}'\'' -e'"" [2025-09-07 06:32:16][356380561794146][811 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:32:16][356380561794146][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561794146\",\"model\":\"SM-S921W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3351\"}'\'' -e'"" [2025-09-07 06:32:21][356380561794146][5231 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52022a75-515d-433d-ac60-a895efc6a7c8","id":"QR_52022a75-515d-433d-ac60-a895efc6a7c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:32:21][356380561794146][5387 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-07 06:32:21][356380561794146][5387 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-09-07 06:32:21][356380561794146][5387 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:34:04][354332880285779][1 ms][INFO] === Request start === [2025-09-07 06:34:04][354332880285779][1 ms][DEBUG] START check_scloud [2025-09-07 06:34:04][354332880285779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:34:04][354332880285779][254 ms][DEBUG] SU: done in 252 ms; outu0_a118 15459 4967 25014132 162316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:34:04][354332880285779][254 ms][DEBUG] targetPkg: running [2025-09-07 06:34:04][354332880285779][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-07 06:34:04][354332880285779][254 ms][DEBUG] START check_boot_completed [2025-09-07 06:34:04][354332880285779][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:34:04][354332880285779][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 06:34:04][354332880285779][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:34:04][354332880285779][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:34:04][354332880285779][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 06:34:04][354332880285779][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:34:04][354332880285779][472 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1474\nsuccessfulTxPacketsPerSecond: 0.21504325301793656\nretriedTxPackets: 251\nretriedTxPacketsPerSecond: 0.07168108433931218\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1445\nsuccessfulRxPacketsPerSecond: 0.1629115553166186\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:34:04][354332880285779][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:34:04][354332880285779][956 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.356/330.356/330.356/0.000 ms\n [2025-09-07 06:34:04][354332880285779][957 ms][DEBUG] check_internet: online [2025-09-07 06:34:04][354332880285779][957 ms][DEBUG] rawBody.length=1149 [2025-09-07 06:34:04][354332880285779][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354332880285779\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7481\"}'\'' -e'"" [2025-09-07 06:34:04][354332880285779][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:34:04][354332880285779][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354332880285779\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7481\"}'\'' -e'"" [2025-09-07 06:34:09][354332880285779][5190 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 06:34:09][354332880285779][5190 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-07 06:34:09][354332880285779][5190 ms][WARN] Detected error: Process with pid 15459 either refused to load frida-agent, or terminated during injectionProcess with pid 15459 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 06:34:09][354332880285779][5190 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 06:34:09][354332880285779][5440 ms][DEBUG] SU: done in 250 ms; outsystem 5395 4967 12438504 214100 ep_poll 0 S system_server\n [2025-09-07 06:34:09][354332880285779][5440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 06:34:09][354332880285779][5580 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 06:34:09][354332880285779][5580 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 06:34:09][354332880285779][5581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 06:34:09][354332880285779][5721 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 06:34:09][354332880285779][5721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 06:34:09][354332880285779][5940 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 06:34:11][354332880285779][7955 ms][DEBUG] START check_boot_completed [2025-09-07 06:34:11][354332880285779][7955 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:34:12][354332880285779][8002 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 06:34:12][354332880285779][8002 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:34:12][354332880285779][8048 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:34:12][354332880285779][8048 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 06:34:15][354332880285779][11063 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 06:34:15][354332880285779][11063 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354332880285779\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7481\"}'\'' -e'"" [2025-09-07 06:34:19][354332880285779][15437 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4087190f-e3ae-4d5b-a6e2-2a8cbbd5514e","id":"QR_4087190f-e3ae-4d5b-a6e2-2a8cbbd5514e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:34:19][354332880285779][15593 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-07 06:34:19][354332880285779][15593 ms][DEBUG] END runCmdUntilRes#2 in 4530 ms [2025-09-07 06:34:19][354332880285779][15594 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:34:21][354332880285779][0 ms][INFO] === Request start === [2025-09-07 06:34:21][354332880285779][1 ms][DEBUG] START check_scloud [2025-09-07 06:34:21][354332880285779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:34:22][354332880285779][240 ms][DEBUG] SU: done in 240 ms; outu0_a118 18896 4967 23626016 124836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:34:22][354332880285779][241 ms][DEBUG] targetPkg: running [2025-09-07 06:34:22][354332880285779][241 ms][DEBUG] END check_scloud in 240 ms [2025-09-07 06:34:22][354332880285779][241 ms][DEBUG] START check_boot_completed [2025-09-07 06:34:22][354332880285779][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:34:22][354332880285779][287 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 06:34:22][354332880285779][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:34:22][354332880285779][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:34:22][354332880285779][334 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 06:34:22][354332880285779][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:34:22][354332880285779][428 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1474\nsuccessfulTxPacketsPerSecond: 0.21504325301793656\nretriedTxPackets: 251\nretriedTxPacketsPerSecond: 0.07168108433931218\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1445\nsuccessfulRxPacketsPerSecond: 0.1629115553166186\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:34:22][354332880285779][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:34:22][354332880285779][787 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.734/259.734/259.734/0.000 ms\n [2025-09-07 06:34:22][354332880285779][787 ms][DEBUG] check_internet: online [2025-09-07 06:34:22][354332880285779][787 ms][DEBUG] rawBody.length=1159 [2025-09-07 06:34:22][354332880285779][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354332880285779\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6613\"}'\'' -e'"" [2025-09-07 06:34:22][354332880285779][787 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:34:22][354332880285779][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354332880285779\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6613\"}'\'' -e'"" [2025-09-07 06:34:27][354332880285779][5926 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c370fcc-f9e3-4b27-a47d-628782d43da4","id":"QR_7c370fcc-f9e3-4b27-a47d-628782d43da4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:34:28][354332880285779][6082 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 06:34:28][354332880285779][6083 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-07 06:34:28][354332880285779][6083 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:43:03][350490940844888][1 ms][INFO] === Request start === [2025-09-07 06:43:03][350490940844888][1 ms][DEBUG] START check_scloud [2025-09-07 06:43:03][350490940844888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:43:03][350490940844888][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 18896 4967 23651328 138952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:43:03][350490940844888][283 ms][DEBUG] targetPkg: running [2025-09-07 06:43:03][350490940844888][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-07 06:43:03][350490940844888][283 ms][DEBUG] START check_boot_completed [2025-09-07 06:43:03][350490940844888][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:43:03][350490940844888][314 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:43:03][350490940844888][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:43:03][350490940844888][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:43:03][350490940844888][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:43:03][350490940844888][361 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:43:03][350490940844888][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940844888\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-09-07 06:43:03][350490940844888][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:43:03][350490940844888][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940844888\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-09-07 06:43:08][350490940844888][5469 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c13fa32-1270-4851-8836-8175adb7639f","id":"QR_1c13fa32-1270-4851-8836-8175adb7639f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:43:08][350490940844888][5625 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-07 06:43:08][350490940844888][5625 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-07 06:43:08][350490940844888][5626 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:43:11][350490940844888][0 ms][INFO] === Request start === [2025-09-07 06:43:11][350490940844888][1 ms][DEBUG] START check_scloud [2025-09-07 06:43:11][350490940844888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:43:11][350490940844888][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18896 4967 23805076 149632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:43:11][350490940844888][311 ms][DEBUG] targetPkg: running [2025-09-07 06:43:11][350490940844888][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 06:43:11][350490940844888][311 ms][DEBUG] START check_boot_completed [2025-09-07 06:43:11][350490940844888][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:43:11][350490940844888][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 06:43:11][350490940844888][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:43:11][350490940844888][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:43:11][350490940844888][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 06:43:11][350490940844888][404 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:43:11][350490940844888][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940844888\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9128\"}'\'' -e'"" [2025-09-07 06:43:11][350490940844888][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:43:11][350490940844888][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940844888\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9128\"}'\'' -e'"" [2025-09-07 06:43:16][350490940844888][5528 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3d6d054-05d6-47c0-830e-7391931c3bea","id":"QR_c3d6d054-05d6-47c0-830e-7391931c3bea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:43:16][350490940844888][5684 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-07 06:43:16][350490940844888][5684 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-07 06:43:16][350490940844888][5684 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:43:20][357629881702380][0 ms][INFO] === Request start === [2025-09-07 06:43:20][357629881702380][1 ms][DEBUG] START check_scloud [2025-09-07 06:43:20][357629881702380][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:43:21][357629881702380][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18896 4967 23972124 161604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:43:21][357629881702380][314 ms][DEBUG] targetPkg: running [2025-09-07 06:43:21][357629881702380][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 06:43:21][357629881702380][314 ms][DEBUG] START check_boot_completed [2025-09-07 06:43:21][357629881702380][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:43:21][357629881702380][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 06:43:21][357629881702380][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:43:21][357629881702380][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 06:43:21][357629881702380][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 06:43:21][357629881702380][423 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:43:21][357629881702380][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629881702380\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8849\"}'\'' -e'"" [2025-09-07 06:43:21][357629881702380][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:43:21][357629881702380][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629881702380\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8849\"}'\'' -e'"" [2025-09-07 06:43:24][357629881702380][3781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f94a0fa-71eb-46c2-bef6-8d64cb8b6967","id":"QR_3f94a0fa-71eb-46c2-bef6-8d64cb8b6967","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:43:24][357629881702380][3937 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-07 06:43:24][357629881702380][3937 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-07 06:43:24][357629881702380][3938 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:43:27][357629881702380][0 ms][INFO] === Request start === [2025-09-07 06:43:27][357629881702380][1 ms][DEBUG] START check_scloud [2025-09-07 06:43:27][357629881702380][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:43:27][357629881702380][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 18896 4967 24134720 172548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:43:27][357629881702380][309 ms][DEBUG] targetPkg: running [2025-09-07 06:43:27][357629881702380][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 06:43:27][357629881702380][309 ms][DEBUG] START check_boot_completed [2025-09-07 06:43:27][357629881702380][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:43:27][357629881702380][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:43:27][357629881702380][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:43:27][357629881702380][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:43:27][357629881702380][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:43:27][357629881702380][386 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:43:27][357629881702380][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629881702380\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2211\"}'\'' -e'"" [2025-09-07 06:43:27][357629881702380][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:43:27][357629881702380][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629881702380\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2211\"}'\'' -e'"" [2025-09-07 06:43:32][357629881702380][4932 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b982d90-b661-4ab0-b53d-4ece5a5f6961","id":"QR_4b982d90-b661-4ab0-b53d-4ece5a5f6961","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:43:32][357629881702380][5088 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-07 06:43:32][357629881702380][5088 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-07 06:43:32][357629881702380][5088 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:46:03][351828112182570][1 ms][INFO] === Request start === [2025-09-07 06:46:03][351828112182570][1 ms][DEBUG] START check_scloud [2025-09-07 06:46:03][351828112182570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:46:03][351828112182570][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18896 4967 24252508 184508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:46:03][351828112182570][301 ms][DEBUG] targetPkg: running [2025-09-07 06:46:03][351828112182570][302 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 06:46:03][351828112182570][302 ms][DEBUG] START check_boot_completed [2025-09-07 06:46:03][351828112182570][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:46:03][351828112182570][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:46:03][351828112182570][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:46:03][351828112182570][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:46:03][351828112182570][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:46:03][351828112182570][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:46:03][351828112182570][489 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1817\nsuccessfulTxPacketsPerSecond: 0.7407112156300031\nretriedTxPackets: 329\nretriedTxPacketsPerSecond: 0.12621984840331893\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1752\nsuccessfulRxPacketsPerSecond: 0.6776012914283437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:46:03][351828112182570][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:46:05][351828112182570][1911 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.487/301.487/301.487/0.000 ms\n [2025-09-07 06:46:05][351828112182570][1911 ms][DEBUG] check_internet: online [2025-09-07 06:46:05][351828112182570][1911 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:46:05][351828112182570][1911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112182570\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4507\"}'\'' -e'"" [2025-09-07 06:46:05][351828112182570][1911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:46:05][351828112182570][1911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112182570\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4507\"}'\'' -e'"" [2025-09-07 06:46:09][351828112182570][5597 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_411ca4a5-0d82-4fb1-a23a-c5eabc899b3b","id":"QR_411ca4a5-0d82-4fb1-a23a-c5eabc899b3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:46:09][351828112182570][5753 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-07 06:46:09][351828112182570][5753 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-07 06:46:09][351828112182570][5753 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:46:11][351828112182570][0 ms][INFO] === Request start === [2025-09-07 06:46:11][351828112182570][1 ms][DEBUG] START check_scloud [2025-09-07 06:46:11][351828112182570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:46:11][351828112182570][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18896 4967 24425764 195312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:46:11][351828112182570][295 ms][DEBUG] targetPkg: running [2025-09-07 06:46:11][351828112182570][295 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 06:46:11][351828112182570][295 ms][DEBUG] START check_boot_completed [2025-09-07 06:46:11][351828112182570][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:46:11][351828112182570][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 06:46:11][351828112182570][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:46:11][351828112182570][404 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 06:46:11][351828112182570][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 06:46:11][351828112182570][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:46:12][351828112182570][545 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1817\nsuccessfulTxPacketsPerSecond: 0.7407112156300031\nretriedTxPackets: 329\nretriedTxPacketsPerSecond: 0.12621984840331893\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1752\nsuccessfulRxPacketsPerSecond: 0.6776012914283437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:46:12][351828112182570][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:46:12][351828112182570][920 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.133/254.133/254.133/0.000 ms\n [2025-09-07 06:46:12][351828112182570][920 ms][DEBUG] check_internet: online [2025-09-07 06:46:12][351828112182570][920 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:46:12][351828112182570][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112182570\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7656\"}'\'' -e'"" [2025-09-07 06:46:12][351828112182570][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:46:12][351828112182570][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112182570\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7656\"}'\'' -e'"" [2025-09-07 06:46:17][351828112182570][6090 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9780227a-99c7-4d18-9063-a647f997c6b5","id":"QR_9780227a-99c7-4d18-9063-a647f997c6b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:46:17][351828112182570][6247 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-07 06:46:17][351828112182570][6247 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-07 06:46:17][351828112182570][6247 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:52:03][351123964134873][1 ms][INFO] === Request start === [2025-09-07 06:52:03][351123964134873][1 ms][DEBUG] START check_scloud [2025-09-07 06:52:03][351123964134873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:52:03][351123964134873][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 18896 4967 24530276 206960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:52:03][351123964134873][294 ms][DEBUG] targetPkg: running [2025-09-07 06:52:03][351123964134873][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 06:52:03][351123964134873][294 ms][DEBUG] START check_boot_completed [2025-09-07 06:52:03][351123964134873][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:52:03][351123964134873][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:52:03][351123964134873][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:52:03][351123964134873][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:52:03][351123964134873][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:52:03][351123964134873][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:52:03][351123964134873][482 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2014\nsuccessfulTxPacketsPerSecond: 0.14174846734469684\nretriedTxPackets: 395\nretriedTxPacketsPerSecond: 0.12402990892660973\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1917\nsuccessfulRxPacketsPerSecond: 0.041343302975536574\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:52:03][351123964134873][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:52:05][351123964134873][1825 ms][DEBUG] SU: done in 1344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.352/301.352/301.352/0.000 ms\n [2025-09-07 06:52:05][351123964134873][1825 ms][DEBUG] check_internet: online [2025-09-07 06:52:05][351123964134873][1825 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:52:05][351123964134873][1825 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123964134873\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4437\"}'\'' -e'"" [2025-09-07 06:52:05][351123964134873][1825 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:52:05][351123964134873][1825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123964134873\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4437\"}'\'' -e'"" [2025-09-07 06:52:09][351123964134873][5715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b869a18-e4b6-4bc1-8dce-755d20f4bed0","id":"QR_2b869a18-e4b6-4bc1-8dce-755d20f4bed0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:52:09][351123964134873][5871 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-07 06:52:09][351123964134873][5871 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-07 06:52:09][351123964134873][5871 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:52:11][351123964134873][0 ms][INFO] === Request start === [2025-09-07 06:52:11][351123964134873][1 ms][DEBUG] START check_scloud [2025-09-07 06:52:11][351123964134873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:52:11][351123964134873][266 ms][DEBUG] SU: done in 266 ms; outu0_a118 18896 4967 24668780 217724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:52:11][351123964134873][267 ms][DEBUG] targetPkg: running [2025-09-07 06:52:11][351123964134873][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-07 06:52:11][351123964134873][267 ms][DEBUG] START check_boot_completed [2025-09-07 06:52:11][351123964134873][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:52:11][351123964134873][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 06:52:11][351123964134873][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:52:12][351123964134873][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:52:12][351123964134873][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 06:52:12][351123964134873][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 06:52:12][351123964134873][470 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2014\nsuccessfulTxPacketsPerSecond: 0.14174846734469684\nretriedTxPackets: 395\nretriedTxPacketsPerSecond: 0.12402990892660973\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1917\nsuccessfulRxPacketsPerSecond: 0.041343302975536574\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 06:52:12][351123964134873][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 06:52:12][351123964134873][829 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.039/224.039/224.039/0.000 ms\n [2025-09-07 06:52:12][351123964134873][829 ms][DEBUG] check_internet: online [2025-09-07 06:52:12][351123964134873][829 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:52:12][351123964134873][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123964134873\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1787\"}'\'' -e'"" [2025-09-07 06:52:12][351123964134873][829 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:52:12][351123964134873][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123964134873\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1787\"}'\'' -e'"" [2025-09-07 06:52:17][351123964134873][5874 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_886ae84f-233f-4e7d-9035-92cc894ab417","id":"QR_886ae84f-233f-4e7d-9035-92cc894ab417","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:52:17][351123964134873][6031 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-07 06:52:17][351123964134873][6031 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-07 06:52:17][351123964134873][6031 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:53:03][350987615835646][0 ms][INFO] === Request start === [2025-09-07 06:53:03][350987615835646][1 ms][DEBUG] START check_scloud [2025-09-07 06:53:03][350987615835646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:53:03][350987615835646][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 18896 4967 24791780 229696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:53:03][350987615835646][303 ms][DEBUG] targetPkg: running [2025-09-07 06:53:03][350987615835646][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 06:53:03][350987615835646][303 ms][DEBUG] START check_boot_completed [2025-09-07 06:53:03][350987615835646][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:53:03][350987615835646][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:53:03][350987615835646][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:53:03][350987615835646][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:53:03][350987615835646][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:53:03][350987615835646][382 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:53:03][350987615835646][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615835646\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4792\"}'\'' -e'"" [2025-09-07 06:53:03][350987615835646][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:53:03][350987615835646][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615835646\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4792\"}'\'' -e'"" [2025-09-07 06:53:06][350987615835646][3709 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56077984-6f8c-42c4-808f-d09e628b2007","id":"QR_56077984-6f8c-42c4-808f-d09e628b2007","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:53:06][350987615835646][3865 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-07 06:53:06][350987615835646][3865 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-07 06:53:06][350987615835646][3865 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:53:09][350987615835646][0 ms][INFO] === Request start === [2025-09-07 06:53:09][350987615835646][1 ms][DEBUG] START check_scloud [2025-09-07 06:53:09][350987615835646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:53:09][350987615835646][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 18896 4967 24973296 240492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:53:09][350987615835646][256 ms][DEBUG] targetPkg: running [2025-09-07 06:53:09][350987615835646][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-07 06:53:09][350987615835646][256 ms][DEBUG] START check_boot_completed [2025-09-07 06:53:09][350987615835646][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:53:09][350987615835646][318 ms][DEBUG] ADB: done in 62 ms; out [2025-09-07 06:53:09][350987615835646][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:53:09][350987615835646][412 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 06:53:09][350987615835646][412 ms][DEBUG] END check_boot_completed in 156 ms [2025-09-07 06:53:09][350987615835646][412 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:53:09][350987615835646][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615835646\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9624\"}'\'' -e'"" [2025-09-07 06:53:09][350987615835646][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:53:09][350987615835646][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615835646\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9624\"}'\'' -e'"" [2025-09-07 06:53:13][350987615835646][4317 ms][DEBUG] proc_open done in 3905 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 06:53:13][350987615835646][4317 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-07 06:53:13][350987615835646][4317 ms][WARN] Detected error: Process with pid 18896 either refused to load frida-agent, or terminated during injectionProcess with pid 18896 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 06:53:13][350987615835646][4317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 06:53:13][350987615835646][4598 ms][DEBUG] SU: done in 281 ms; outsystem 5395 4967 12477156 225752 ep_poll 0 S system_server\n [2025-09-07 06:53:13][350987615835646][4598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 06:53:14][350987615835646][4739 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 06:53:14][350987615835646][4739 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 06:53:14][350987615835646][4739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 06:53:14][350987615835646][4864 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 06:53:14][350987615835646][4864 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 06:53:14][350987615835646][5020 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 06:53:16][350987615835646][7035 ms][DEBUG] START check_boot_completed [2025-09-07 06:53:16][350987615835646][7035 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:53:16][350987615835646][7082 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 06:53:16][350987615835646][7082 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:53:16][350987615835646][7144 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 06:53:16][350987615835646][7145 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 06:53:19][350987615835646][10159 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 06:53:19][350987615835646][10159 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615835646\",\"model\":\"SM-E225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9624\"}'\'' -e'"" [2025-09-07 06:53:24][350987615835646][15314 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5bfc216-57f3-40c2-b4b9-23cfd82716bc","id":"QR_a5bfc216-57f3-40c2-b4b9-23cfd82716bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:53:24][350987615835646][15470 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 06:53:24][350987615835646][15471 ms][DEBUG] END runCmdUntilRes#2 in 5312 ms [2025-09-07 06:53:24][350987615835646][15471 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:57:04][352033733135888][1 ms][INFO] === Request start === [2025-09-07 06:57:04][352033733135888][1 ms][DEBUG] START check_scloud [2025-09-07 06:57:04][352033733135888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:57:04][352033733135888][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 20826 4967 23563240 127460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:57:04][352033733135888][322 ms][DEBUG] targetPkg: running [2025-09-07 06:57:04][352033733135888][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 06:57:04][352033733135888][322 ms][DEBUG] START check_boot_completed [2025-09-07 06:57:04][352033733135888][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:57:04][352033733135888][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:57:04][352033733135888][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:57:04][352033733135888][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:57:04][352033733135888][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 06:57:04][352033733135888][400 ms][DEBUG] rawBody.length=1150 [2025-09-07 06:57:04][352033733135888][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352033733135888\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1469\"}'\'' -e'"" [2025-09-07 06:57:04][352033733135888][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:57:04][352033733135888][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352033733135888\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1469\"}'\'' -e'"" [2025-09-07 06:57:09][352033733135888][5117 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_649cb4bc-de20-46bd-a7dc-74e6ccd02900","id":"QR_649cb4bc-de20-46bd-a7dc-74e6ccd02900","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:57:09][352033733135888][5274 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-07 06:57:09][352033733135888][5274 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-07 06:57:09][352033733135888][5274 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 06:57:11][352033733135888][0 ms][INFO] === Request start === [2025-09-07 06:57:11][352033733135888][1 ms][DEBUG] START check_scloud [2025-09-07 06:57:11][352033733135888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 06:57:12][352033733135888][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 20826 4967 23724080 137228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 06:57:12][352033733135888][261 ms][DEBUG] targetPkg: running [2025-09-07 06:57:12][352033733135888][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-07 06:57:12][352033733135888][261 ms][DEBUG] START check_boot_completed [2025-09-07 06:57:12][352033733135888][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 06:57:12][352033733135888][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 06:57:12][352033733135888][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 06:57:12][352033733135888][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 06:57:12][352033733135888][340 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 06:57:12][352033733135888][340 ms][DEBUG] rawBody.length=1160 [2025-09-07 06:57:12][352033733135888][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352033733135888\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2269\"}'\'' -e'"" [2025-09-07 06:57:12][352033733135888][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 06:57:12][352033733135888][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352033733135888\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2269\"}'\'' -e'"" [2025-09-07 06:57:17][352033733135888][5400 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f93426b0-9833-4cd7-9ad0-bc40dd88c52d","id":"QR_f93426b0-9833-4cd7-9ad0-bc40dd88c52d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 06:57:17][352033733135888][5557 ms][DEBUG] proc_open done in 5216 ms; code=255; res.len=3343 [2025-09-07 06:57:17][352033733135888][5557 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-07 06:57:17][352033733135888][5557 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:03:03][354690579172263][1 ms][INFO] === Request start === [2025-09-07 07:03:03][354690579172263][1 ms][DEBUG] START check_scloud [2025-09-07 07:03:03][354690579172263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:03:04][354690579172263][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 20826 4967 23841904 149676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:03:04][354690579172263][297 ms][DEBUG] targetPkg: running [2025-09-07 07:03:04][354690579172263][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 07:03:04][354690579172263][298 ms][DEBUG] START check_boot_completed [2025-09-07 07:03:04][354690579172263][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:03:04][354690579172263][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:03:04][354690579172263][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:03:04][354690579172263][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:03:04][354690579172263][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:03:04][354690579172263][376 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:03:04][354690579172263][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690579172263\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2752\"}'\'' -e'"" [2025-09-07 07:03:04][354690579172263][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:03:04][354690579172263][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690579172263\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2752\"}'\'' -e'"" [2025-09-07 07:03:10][354690579172263][6687 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99c3a04a-0993-4b19-b8a3-fc1e7f39b051","id":"QR_99c3a04a-0993-4b19-b8a3-fc1e7f39b051","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:03:10][354690579172263][6843 ms][DEBUG] proc_open done in 6467 ms; code=255; res.len=3343 [2025-09-07 07:03:10][354690579172263][6843 ms][DEBUG] END runCmdUntilRes#1 in 6467 ms [2025-09-07 07:03:10][354690579172263][6843 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:03:13][354690579172263][0 ms][INFO] === Request start === [2025-09-07 07:03:13][354690579172263][1 ms][DEBUG] START check_scloud [2025-09-07 07:03:13][354690579172263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:03:14][354690579172263][251 ms][DEBUG] SU: done in 251 ms; outu0_a118 20826 4967 24005944 160524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:03:14][354690579172263][251 ms][DEBUG] targetPkg: running [2025-09-07 07:03:14][354690579172263][251 ms][DEBUG] END check_scloud in 251 ms [2025-09-07 07:03:14][354690579172263][252 ms][DEBUG] START check_boot_completed [2025-09-07 07:03:14][354690579172263][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:03:14][354690579172263][298 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:03:14][354690579172263][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:03:14][354690579172263][347 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 07:03:14][354690579172263][347 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 07:03:14][354690579172263][347 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:03:14][354690579172263][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690579172263\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4829\"}'\'' -e'"" [2025-09-07 07:03:14][354690579172263][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:03:14][354690579172263][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690579172263\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4829\"}'\'' -e'"" [2025-09-07 07:03:19][354690579172263][5281 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a4335af-9f94-49f3-a564-d718e6b77d79","id":"QR_2a4335af-9f94-49f3-a564-d718e6b77d79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:03:19][354690579172263][5437 ms][DEBUG] proc_open done in 5090 ms; code=255; res.len=3343 [2025-09-07 07:03:19][354690579172263][5437 ms][DEBUG] END runCmdUntilRes#1 in 5090 ms [2025-09-07 07:03:19][354690579172263][5437 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:07:03][357066606249035][1 ms][INFO] === Request start === [2025-09-07 07:07:03][357066606249035][1 ms][DEBUG] START check_scloud [2025-09-07 07:07:03][357066606249035][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:07:04][357066606249035][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 20826 4967 24136184 166096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:07:04][357066606249035][297 ms][DEBUG] targetPkg: running [2025-09-07 07:07:04][357066606249035][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 07:07:04][357066606249035][297 ms][DEBUG] START check_boot_completed [2025-09-07 07:07:04][357066606249035][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:07:04][357066606249035][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:07:04][357066606249035][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:07:04][357066606249035][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:07:04][357066606249035][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:07:04][357066606249035][375 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:07:04][357066606249035][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066606249035\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4494\"}'\'' -e'"" [2025-09-07 07:07:04][357066606249035][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:07:04][357066606249035][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066606249035\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4494\"}'\'' -e'"" [2025-09-07 07:07:08][357066606249035][4827 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef96f99d-dfc6-4b5e-8900-f578778cd575","id":"QR_ef96f99d-dfc6-4b5e-8900-f578778cd575","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:07:08][357066606249035][4983 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-07 07:07:08][357066606249035][4983 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-07 07:07:08][357066606249035][4983 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:07:11][357066606249035][1 ms][INFO] === Request start === [2025-09-07 07:07:11][357066606249035][1 ms][DEBUG] START check_scloud [2025-09-07 07:07:11][357066606249035][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:07:11][357066606249035][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20826 4967 24262272 165016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:07:11][357066606249035][308 ms][DEBUG] targetPkg: running [2025-09-07 07:07:11][357066606249035][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 07:07:11][357066606249035][308 ms][DEBUG] START check_boot_completed [2025-09-07 07:07:11][357066606249035][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:07:11][357066606249035][354 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 07:07:11][357066606249035][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:07:11][357066606249035][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:07:11][357066606249035][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:07:11][357066606249035][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:07:11][357066606249035][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066606249035\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3153\"}'\'' -e'"" [2025-09-07 07:07:11][357066606249035][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:07:11][357066606249035][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066606249035\",\"model\":\"SM-S721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3153\"}'\'' -e'"" [2025-09-07 07:07:16][357066606249035][5462 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5bda3bce-3582-47da-b7ef-59cbb0a73f60","id":"QR_5bda3bce-3582-47da-b7ef-59cbb0a73f60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:07:16][357066606249035][5618 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 07:07:16][357066606249035][5618 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-07 07:07:16][357066606249035][5619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:09:03][357133781394406][0 ms][INFO] === Request start === [2025-09-07 07:09:03][357133781394406][1 ms][DEBUG] START check_scloud [2025-09-07 07:09:03][357133781394406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:09:04][357133781394406][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 20826 4967 24382144 176196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:09:04][357133781394406][303 ms][DEBUG] targetPkg: running [2025-09-07 07:09:04][357133781394406][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 07:09:04][357133781394406][303 ms][DEBUG] START check_boot_completed [2025-09-07 07:09:04][357133781394406][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:09:04][357133781394406][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:09:04][357133781394406][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:09:04][357133781394406][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:09:04][357133781394406][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:09:04][357133781394406][397 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:09:04][357133781394406][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357133781394406\",\"model\":\"SM-A165N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2233\"}'\'' -e'"" [2025-09-07 07:09:04][357133781394406][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:09:04][357133781394406][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357133781394406\",\"model\":\"SM-A165N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2233\"}'\'' -e'"" [2025-09-07 07:09:08][357133781394406][4864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05629df8-926d-4d77-a5da-8dd773c76c7e","id":"QR_05629df8-926d-4d77-a5da-8dd773c76c7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:09:08][357133781394406][5020 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-07 07:09:08][357133781394406][5021 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-07 07:09:08][357133781394406][5021 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:09:11][357133781394406][1 ms][INFO] === Request start === [2025-09-07 07:09:11][357133781394406][1 ms][DEBUG] START check_scloud [2025-09-07 07:09:11][357133781394406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:09:11][357133781394406][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 20826 4967 24528712 187924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:09:11][357133781394406][306 ms][DEBUG] targetPkg: running [2025-09-07 07:09:11][357133781394406][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 07:09:11][357133781394406][306 ms][DEBUG] START check_boot_completed [2025-09-07 07:09:11][357133781394406][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:09:11][357133781394406][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:09:11][357133781394406][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:09:11][357133781394406][399 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:09:11][357133781394406][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 07:09:11][357133781394406][399 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:09:11][357133781394406][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357133781394406\",\"model\":\"SM-A165N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5241\"}'\'' -e'"" [2025-09-07 07:09:11][357133781394406][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:09:11][357133781394406][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357133781394406\",\"model\":\"SM-A165N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5241\"}'\'' -e'"" [2025-09-07 07:09:16][357133781394406][5617 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10444b95-c3c7-42f6-a241-722189b1cac7","id":"QR_10444b95-c3c7-42f6-a241-722189b1cac7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:09:16][357133781394406][5773 ms][DEBUG] proc_open done in 5374 ms; code=255; res.len=3343 [2025-09-07 07:09:16][357133781394406][5773 ms][DEBUG] END runCmdUntilRes#1 in 5374 ms [2025-09-07 07:09:16][357133781394406][5773 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:10:03][350011603608293][0 ms][INFO] === Request start === [2025-09-07 07:10:03][350011603608293][1 ms][DEBUG] START check_scloud [2025-09-07 07:10:03][350011603608293][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:10:03][350011603608293][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 20826 4967 24646152 198940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:10:03][350011603608293][260 ms][DEBUG] targetPkg: running [2025-09-07 07:10:03][350011603608293][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-07 07:10:03][350011603608293][260 ms][DEBUG] START check_boot_completed [2025-09-07 07:10:03][350011603608293][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:10:03][350011603608293][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:10:03][350011603608293][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:10:03][350011603608293][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:10:03][350011603608293][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:10:03][350011603608293][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:10:03][350011603608293][464 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2386\nsuccessfulTxPacketsPerSecond: 0.2192749308951733\nretriedTxPackets: 491\nretriedTxPacketsPerSecond: 0.0830586859451414\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2227\nsuccessfulRxPacketsPerSecond: 0.1827291090793111\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:10:03][350011603608293][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:10:05][350011603608293][1916 ms][DEBUG] SU: done in 1452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.523/405.523/405.523/0.000 ms\n [2025-09-07 07:10:05][350011603608293][1916 ms][DEBUG] check_internet: online [2025-09-07 07:10:05][350011603608293][1916 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:10:05][350011603608293][1916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011603608293\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6884\"}'\'' -e'"" [2025-09-07 07:10:05][350011603608293][1916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:10:05][350011603608293][1916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011603608293\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6884\"}'\'' -e'"" [2025-09-07 07:10:09][350011603608293][5602 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7cdd16d-f236-4e33-b71d-5b02a857e608","id":"QR_b7cdd16d-f236-4e33-b71d-5b02a857e608","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:10:09][350011603608293][5758 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-09-07 07:10:09][350011603608293][5759 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-09-07 07:10:09][350011603608293][5759 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:10:11][350011603608293][0 ms][INFO] === Request start === [2025-09-07 07:10:11][350011603608293][1 ms][DEBUG] START check_scloud [2025-09-07 07:10:11][350011603608293][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:10:11][350011603608293][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 20826 4967 24802960 210716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:10:11][350011603608293][314 ms][DEBUG] targetPkg: running [2025-09-07 07:10:11][350011603608293][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 07:10:11][350011603608293][314 ms][DEBUG] START check_boot_completed [2025-09-07 07:10:11][350011603608293][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:10:12][350011603608293][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:10:12][350011603608293][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:10:12][350011603608293][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:10:12][350011603608293][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:10:12][350011603608293][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:10:12][350011603608293][518 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2386\nsuccessfulTxPacketsPerSecond: 0.2192749308951733\nretriedTxPackets: 491\nretriedTxPacketsPerSecond: 0.0830586859451414\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2227\nsuccessfulRxPacketsPerSecond: 0.1827291090793111\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:10:12][350011603608293][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:10:12][350011603608293][954 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.585/329.585/329.585/0.000 ms\n [2025-09-07 07:10:12][350011603608293][954 ms][DEBUG] check_internet: online [2025-09-07 07:10:12][350011603608293][954 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:10:12][350011603608293][954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011603608293\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8699\"}'\'' -e'"" [2025-09-07 07:10:12][350011603608293][954 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:10:12][350011603608293][954 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011603608293\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8699\"}'\'' -e'"" [2025-09-07 07:10:17][350011603608293][5999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8817474-fbb5-4444-b6ca-f75fc017b544","id":"QR_d8817474-fbb5-4444-b6ca-f75fc017b544","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:10:17][350011603608293][6156 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 07:10:17][350011603608293][6156 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 07:10:17][350011603608293][6156 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:14:03][352438113485136][1 ms][INFO] === Request start === [2025-09-07 07:14:03][352438113485136][1 ms][DEBUG] START check_scloud [2025-09-07 07:14:03][352438113485136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:14:03][352438113485136][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20826 4967 24937172 219572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:14:03][352438113485136][310 ms][DEBUG] targetPkg: running [2025-09-07 07:14:03][352438113485136][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 07:14:03][352438113485136][310 ms][DEBUG] START check_boot_completed [2025-09-07 07:14:03][352438113485136][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:14:03][352438113485136][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:14:03][352438113485136][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:14:03][352438113485136][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:14:03][352438113485136][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 07:14:03][352438113485136][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:14:04][352438113485136][498 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2561\nsuccessfulTxPacketsPerSecond: 0.5811790961502696\nretriedTxPackets: 545\nretriedTxPacketsPerSecond: 0.17933526395494034\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2376\nsuccessfulRxPacketsPerSecond: 0.4948324875793725\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:14:04][352438113485136][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:14:04][352438113485136][935 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.691/295.691/295.691/0.000 ms\n [2025-09-07 07:14:04][352438113485136][935 ms][DEBUG] check_internet: online [2025-09-07 07:14:04][352438113485136][935 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:14:04][352438113485136][935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352438113485136\",\"model\":\"SM-F700F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7453\"}'\'' -e'"" [2025-09-07 07:14:04][352438113485136][935 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:14:04][352438113485136][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352438113485136\",\"model\":\"SM-F700F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7453\"}'\'' -e'"" [2025-09-07 07:14:08][352438113485136][4997 ms][DEBUG] proc_open done in 4061 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 07:14:08][352438113485136][4997 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-09-07 07:14:08][352438113485136][4997 ms][WARN] Detected error: Process with pid 20826 either refused to load frida-agent, or terminated during injectionProcess with pid 20826 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 07:14:08][352438113485136][4997 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 07:14:08][352438113485136][5293 ms][DEBUG] SU: done in 296 ms; outsystem 5395 4967 12752544 239560 ep_poll 0 S system_server\n [2025-09-07 07:14:08][352438113485136][5294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 07:14:09][352438113485136][5434 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 07:14:09][352438113485136][5434 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 07:14:09][352438113485136][5434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 07:14:09][352438113485136][5559 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 07:14:09][352438113485136][5559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 07:14:09][352438113485136][5731 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 07:14:11][352438113485136][7746 ms][DEBUG] START check_boot_completed [2025-09-07 07:14:11][352438113485136][7746 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:14:11][352438113485136][7793 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:14:11][352438113485136][7793 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:14:11][352438113485136][7840 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:14:11][352438113485136][7840 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 07:14:14][352438113485136][10854 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 07:14:14][352438113485136][10855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352438113485136\",\"model\":\"SM-F700F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7453\"}'\'' -e'"" [2025-09-07 07:14:18][352438113485136][14791 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_540972ac-bc57-431c-ac00-765a1db48df7","id":"QR_540972ac-bc57-431c-ac00-765a1db48df7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:14:18][352438113485136][14947 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-07 07:14:18][352438113485136][14947 ms][DEBUG] END runCmdUntilRes#2 in 4093 ms [2025-09-07 07:14:18][352438113485136][14947 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:14:20][352438113485136][0 ms][INFO] === Request start === [2025-09-07 07:14:20][352438113485136][1 ms][DEBUG] START check_scloud [2025-09-07 07:14:20][352438113485136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:14:21][352438113485136][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 23455 4967 23699228 124456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:14:21][352438113485136][245 ms][DEBUG] targetPkg: running [2025-09-07 07:14:21][352438113485136][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-07 07:14:21][352438113485136][245 ms][DEBUG] START check_boot_completed [2025-09-07 07:14:21][352438113485136][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:14:21][352438113485136][276 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:14:21][352438113485136][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:14:21][352438113485136][323 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:14:21][352438113485136][324 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:14:21][352438113485136][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:14:21][352438113485136][433 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2561\nsuccessfulTxPacketsPerSecond: 0.5811790961502696\nretriedTxPackets: 545\nretriedTxPacketsPerSecond: 0.17933526395494034\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2376\nsuccessfulRxPacketsPerSecond: 0.4948324875793725\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:14:21][352438113485136][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:14:21][352438113485136][810 ms][DEBUG] SU: done in 377 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.900/249.900/249.900/0.000 ms\n [2025-09-07 07:14:21][352438113485136][810 ms][DEBUG] check_internet: online [2025-09-07 07:14:21][352438113485136][810 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:14:21][352438113485136][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352438113485136\",\"model\":\"SM-F700F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6262\"}'\'' -e'"" [2025-09-07 07:14:21][352438113485136][810 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:14:21][352438113485136][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352438113485136\",\"model\":\"SM-F700F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6262\"}'\'' -e'"" [2025-09-07 07:14:26][352438113485136][5853 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4f49cf3-77c0-46a8-9be2-9d5263e677f1","id":"QR_a4f49cf3-77c0-46a8-9be2-9d5263e677f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:14:26][352438113485136][6009 ms][DEBUG] proc_open done in 5199 ms; code=255; res.len=3343 [2025-09-07 07:14:26][352438113485136][6009 ms][DEBUG] END runCmdUntilRes#1 in 5200 ms [2025-09-07 07:14:26][352438113485136][6010 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:18:04][350655882899971][1 ms][INFO] === Request start === [2025-09-07 07:18:04][350655882899971][1 ms][DEBUG] START check_scloud [2025-09-07 07:18:04][350655882899971][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:18:05][350655882899971][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23455 4967 23758412 138796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:18:05][350655882899971][311 ms][DEBUG] targetPkg: running [2025-09-07 07:18:05][350655882899971][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 07:18:05][350655882899971][311 ms][DEBUG] START check_boot_completed [2025-09-07 07:18:05][350655882899971][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:18:05][350655882899971][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:18:05][350655882899971][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:18:05][350655882899971][390 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 07:18:05][350655882899971][390 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 07:18:05][350655882899971][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:18:05][350655882899971][531 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2629\nsuccessfulTxPacketsPerSecond: 0.22589936183430281\nretriedTxPackets: 576\nretriedTxPacketsPerSecond: 0.10298353260093217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2432\nsuccessfulRxPacketsPerSecond: 0.18603476856942586\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:18:05][350655882899971][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:18:06][350655882899971][1936 ms][DEBUG] SU: done in 1404 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.582/300.582/300.582/0.000 ms\n [2025-09-07 07:18:06][350655882899971][1936 ms][DEBUG] check_internet: online [2025-09-07 07:18:06][350655882899971][1936 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:18:06][350655882899971][1936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882899971\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9738\"}'\'' -e'"" [2025-09-07 07:18:06][350655882899971][1936 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:18:06][350655882899971][1936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882899971\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9738\"}'\'' -e'"" [2025-09-07 07:18:12][350655882899971][7387 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa7b32dd-561e-402f-b37f-ad34fcc7181c","id":"QR_aa7b32dd-561e-402f-b37f-ad34fcc7181c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:18:12][350655882899971][7544 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-07 07:18:12][350655882899971][7544 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-07 07:18:12][350655882899971][7544 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:18:15][350655882899971][0 ms][INFO] === Request start === [2025-09-07 07:18:15][350655882899971][1 ms][DEBUG] START check_scloud [2025-09-07 07:18:15][350655882899971][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:18:16][350655882899971][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 23455 4967 23900884 150056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:18:16][350655882899971][313 ms][DEBUG] targetPkg: running [2025-09-07 07:18:16][350655882899971][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 07:18:16][350655882899971][313 ms][DEBUG] START check_boot_completed [2025-09-07 07:18:16][350655882899971][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:18:16][350655882899971][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:18:16][350655882899971][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:18:16][350655882899971][408 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 07:18:16][350655882899971][409 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-07 07:18:16][350655882899971][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:18:16][350655882899971][516 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2629\nsuccessfulTxPacketsPerSecond: 0.22589936183430281\nretriedTxPackets: 576\nretriedTxPacketsPerSecond: 0.10298353260093217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2432\nsuccessfulRxPacketsPerSecond: 0.18603476856942586\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:18:16][350655882899971][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:18:16][350655882899971][937 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.435/322.435/322.435/0.000 ms\n [2025-09-07 07:18:16][350655882899971][938 ms][DEBUG] check_internet: online [2025-09-07 07:18:16][350655882899971][938 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:18:16][350655882899971][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882899971\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9133\"}'\'' -e'"" [2025-09-07 07:18:16][350655882899971][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:18:16][350655882899971][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882899971\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9133\"}'\'' -e'"" [2025-09-07 07:18:20][350655882899971][4780 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d92311d-9972-4d4a-95f2-2fecff08df3c","id":"QR_0d92311d-9972-4d4a-95f2-2fecff08df3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:18:20][350655882899971][4936 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-07 07:18:20][350655882899971][4936 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-09-07 07:18:20][350655882899971][4936 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:18:23][350455581419548][0 ms][INFO] === Request start === [2025-09-07 07:18:23][350455581419548][0 ms][DEBUG] START check_scloud [2025-09-07 07:18:23][350455581419548][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:18:24][350455581419548][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 23455 4967 24037276 160776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:18:24][350455581419548][272 ms][DEBUG] targetPkg: running [2025-09-07 07:18:24][350455581419548][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-07 07:18:24][350455581419548][273 ms][DEBUG] START check_boot_completed [2025-09-07 07:18:24][350455581419548][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:18:24][350455581419548][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:18:24][350455581419548][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:18:24][350455581419548][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:18:24][350455581419548][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:18:24][350455581419548][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:18:24][350455581419548][475 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2629\nsuccessfulTxPacketsPerSecond: 0.22589936183430281\nretriedTxPackets: 576\nretriedTxPacketsPerSecond: 0.10298353260093217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2432\nsuccessfulRxPacketsPerSecond: 0.18603476856942586\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:18:24][350455581419548][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:18:24][350455581419548][913 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.598/335.598/335.598/0.000 ms\n [2025-09-07 07:18:24][350455581419548][913 ms][DEBUG] check_internet: online [2025-09-07 07:18:24][350455581419548][913 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:18:24][350455581419548][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581419548\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4421\"}'\'' -e'"" [2025-09-07 07:18:24][350455581419548][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:18:24][350455581419548][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581419548\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4421\"}'\'' -e'"" [2025-09-07 07:18:29][350455581419548][5552 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb181a40-7bad-4fdc-9090-eb88328782af","id":"QR_eb181a40-7bad-4fdc-9090-eb88328782af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:18:29][350455581419548][5708 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-07 07:18:29][350455581419548][5708 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-07 07:18:29][350455581419548][5708 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:18:33][350455581419548][0 ms][INFO] === Request start === [2025-09-07 07:18:33][350455581419548][1 ms][DEBUG] START check_scloud [2025-09-07 07:18:33][350455581419548][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:18:33][350455581419548][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 23455 4967 24175616 171676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:18:33][350455581419548][309 ms][DEBUG] targetPkg: running [2025-09-07 07:18:33][350455581419548][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 07:18:33][350455581419548][309 ms][DEBUG] START check_boot_completed [2025-09-07 07:18:33][350455581419548][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:18:33][350455581419548][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:18:33][350455581419548][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:18:33][350455581419548][434 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 07:18:33][350455581419548][434 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 07:18:33][350455581419548][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:18:33][350455581419548][543 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2629\nsuccessfulTxPacketsPerSecond: 0.22589936183430281\nretriedTxPackets: 576\nretriedTxPacketsPerSecond: 0.10298353260093217\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2432\nsuccessfulRxPacketsPerSecond: 0.18603476856942586\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:18:33][350455581419548][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:18:34][350455581419548][950 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.705/305.705/305.705/0.000 ms\n [2025-09-07 07:18:34][350455581419548][950 ms][DEBUG] check_internet: online [2025-09-07 07:18:34][350455581419548][950 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:18:34][350455581419548][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581419548\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3932\"}'\'' -e'"" [2025-09-07 07:18:34][350455581419548][950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:18:34][350455581419548][950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581419548\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3932\"}'\'' -e'"" [2025-09-07 07:18:37][350455581419548][4323 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_404173af-309c-40e9-be3e-8e5ae99d188c","id":"QR_404173af-309c-40e9-be3e-8e5ae99d188c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:18:37][350455581419548][4480 ms][DEBUG] proc_open done in 3529 ms; code=255; res.len=3343 [2025-09-07 07:18:37][350455581419548][4480 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-07 07:18:37][350455581419548][4480 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:19:03][350824193004057][0 ms][INFO] === Request start === [2025-09-07 07:19:03][350824193004057][1 ms][DEBUG] START check_scloud [2025-09-07 07:19:03][350824193004057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:19:03][350824193004057][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23455 4967 24250396 183680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:19:03][350824193004057][311 ms][DEBUG] targetPkg: running [2025-09-07 07:19:03][350824193004057][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 07:19:03][350824193004057][311 ms][DEBUG] START check_boot_completed [2025-09-07 07:19:03][350824193004057][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:19:03][350824193004057][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:19:03][350824193004057][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:19:04][350824193004057][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:19:04][350824193004057][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:19:04][350824193004057][389 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:19:04][350824193004057][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824193004057\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7380\"}'\'' -e'"" [2025-09-07 07:19:04][350824193004057][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:19:04][350824193004057][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824193004057\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7380\"}'\'' -e'"" [2025-09-07 07:19:07][350824193004057][4325 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_488419fd-a291-42af-b354-99a06ce288d1","id":"QR_488419fd-a291-42af-b354-99a06ce288d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:19:08][350824193004057][4481 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-07 07:19:08][350824193004057][4481 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-07 07:19:08][350824193004057][4481 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:19:10][350824193004057][0 ms][INFO] === Request start === [2025-09-07 07:19:10][350824193004057][1 ms][DEBUG] START check_scloud [2025-09-07 07:19:10][350824193004057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:19:10][350824193004057][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 23455 4967 24392868 194564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:19:10][350824193004057][317 ms][DEBUG] targetPkg: running [2025-09-07 07:19:10][350824193004057][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 07:19:10][350824193004057][317 ms][DEBUG] START check_boot_completed [2025-09-07 07:19:10][350824193004057][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:19:10][350824193004057][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:19:10][350824193004057][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:19:10][350824193004057][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:19:10][350824193004057][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:19:10][350824193004057][426 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:19:10][350824193004057][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824193004057\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7660\"}'\'' -e'"" [2025-09-07 07:19:10][350824193004057][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:19:10][350824193004057][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824193004057\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7660\"}'\'' -e'"" [2025-09-07 07:19:17][350824193004057][6722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecb3434e-0278-4130-8cd3-9dd0ae7c55dd","id":"QR_ecb3434e-0278-4130-8cd3-9dd0ae7c55dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:19:17][350824193004057][6878 ms][DEBUG] proc_open done in 6451 ms; code=255; res.len=3343 [2025-09-07 07:19:17][350824193004057][6878 ms][DEBUG] END runCmdUntilRes#1 in 6451 ms [2025-09-07 07:19:17][350824193004057][6878 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:25:04][357962505661348][1 ms][INFO] === Request start === [2025-09-07 07:25:04][357962505661348][1 ms][DEBUG] START check_scloud [2025-09-07 07:25:04][357962505661348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:25:04][357962505661348][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 23455 4967 24494372 207312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:25:04][357962505661348][287 ms][DEBUG] targetPkg: running [2025-09-07 07:25:04][357962505661348][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-07 07:25:04][357962505661348][287 ms][DEBUG] START check_boot_completed [2025-09-07 07:25:04][357962505661348][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:25:04][357962505661348][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:25:04][357962505661348][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:25:04][357962505661348][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:25:04][357962505661348][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:25:04][357962505661348][365 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:25:04][357962505661348][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505661348\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2372\"}'\'' -e'"" [2025-09-07 07:25:04][357962505661348][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:25:04][357962505661348][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505661348\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2372\"}'\'' -e'"" [2025-09-07 07:25:09][357962505661348][5067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_107dc4a8-d8e3-4c93-b4cf-41070abcc0af","id":"QR_107dc4a8-d8e3-4c93-b4cf-41070abcc0af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:25:09][357962505661348][5223 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-07 07:25:09][357962505661348][5223 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-07 07:25:09][357962505661348][5223 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:25:11][357962505661348][0 ms][INFO] === Request start === [2025-09-07 07:25:11][357962505661348][1 ms][DEBUG] START check_scloud [2025-09-07 07:25:11][357962505661348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:25:12][357962505661348][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 23455 4967 24663468 217748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:25:12][357962505661348][287 ms][DEBUG] targetPkg: running [2025-09-07 07:25:12][357962505661348][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-07 07:25:12][357962505661348][287 ms][DEBUG] START check_boot_completed [2025-09-07 07:25:12][357962505661348][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:25:12][357962505661348][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:25:12][357962505661348][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:25:12][357962505661348][396 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:25:12][357962505661348][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:25:12][357962505661348][396 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:25:12][357962505661348][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505661348\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4139\"}'\'' -e'"" [2025-09-07 07:25:12][357962505661348][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:25:12][357962505661348][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505661348\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4139\"}'\'' -e'"" [2025-09-07 07:25:17][357962505661348][5598 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44655a4a-3156-4d2b-ada2-fdef81d2a392","id":"QR_44655a4a-3156-4d2b-ada2-fdef81d2a392","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:25:17][357962505661348][5754 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-07 07:25:17][357962505661348][5754 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-07 07:25:17][357962505661348][5754 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:27:03][356080129660231][1 ms][INFO] === Request start === [2025-09-07 07:27:03][356080129660231][1 ms][DEBUG] START check_scloud [2025-09-07 07:27:03][356080129660231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:27:04][356080129660231][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 23455 4967 24808044 229628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:27:04][356080129660231][306 ms][DEBUG] targetPkg: running [2025-09-07 07:27:04][356080129660231][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 07:27:04][356080129660231][306 ms][DEBUG] START check_boot_completed [2025-09-07 07:27:04][356080129660231][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:27:04][356080129660231][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:27:04][356080129660231][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:27:04][356080129660231][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:27:04][356080129660231][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:27:04][356080129660231][399 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:27:04][356080129660231][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080129660231\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6418\"}'\'' -e'"" [2025-09-07 07:27:04][356080129660231][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:27:04][356080129660231][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080129660231\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6418\"}'\'' -e'"" [2025-09-07 07:27:09][356080129660231][5211 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_401f6bef-81ef-4e68-82a9-1fa42356f736","id":"QR_401f6bef-81ef-4e68-82a9-1fa42356f736","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:27:09][356080129660231][5367 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-07 07:27:09][356080129660231][5367 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-07 07:27:09][356080129660231][5367 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:27:11][356080129660231][0 ms][INFO] === Request start === [2025-09-07 07:27:11][356080129660231][1 ms][DEBUG] START check_scloud [2025-09-07 07:27:11][356080129660231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:27:11][356080129660231][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 23455 4967 24944500 240296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:27:11][356080129660231][254 ms][DEBUG] targetPkg: running [2025-09-07 07:27:11][356080129660231][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-07 07:27:11][356080129660231][254 ms][DEBUG] START check_boot_completed [2025-09-07 07:27:11][356080129660231][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:27:12][356080129660231][300 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 07:27:12][356080129660231][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:27:12][356080129660231][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:27:12][356080129660231][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:27:12][356080129660231][347 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:27:12][356080129660231][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080129660231\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7249\"}'\'' -e'"" [2025-09-07 07:27:12][356080129660231][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:27:12][356080129660231][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080129660231\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7249\"}'\'' -e'"" [2025-09-07 07:27:15][356080129660231][4080 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 07:27:15][356080129660231][4080 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-07 07:27:15][356080129660231][4080 ms][WARN] Detected error: Process with pid 23455 either refused to load frida-agent, or terminated during injectionProcess with pid 23455 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 07:27:15][356080129660231][4080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 07:27:16][356080129660231][4346 ms][DEBUG] SU: done in 266 ms; outsystem 5395 4967 12769976 232584 ep_poll 0 S system_server\n [2025-09-07 07:27:16][356080129660231][4346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 07:27:16][356080129660231][4486 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 07:27:16][356080129660231][4486 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 07:27:16][356080129660231][4487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 07:27:16][356080129660231][4611 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 07:27:16][356080129660231][4612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 07:27:16][356080129660231][4768 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 07:27:18][356080129660231][6783 ms][DEBUG] START check_boot_completed [2025-09-07 07:27:18][356080129660231][6783 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:27:18][356080129660231][6829 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:27:18][356080129660231][6830 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:27:18][356080129660231][6876 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:27:18][356080129660231][6876 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 07:27:21][356080129660231][9891 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 07:27:21][356080129660231][9891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080129660231\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7249\"}'\'' -e'"" [2025-09-07 07:27:26][356080129660231][14874 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e10ed659-a2b9-4004-8284-a1481ea924ce","id":"QR_e10ed659-a2b9-4004-8284-a1481ea924ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:27:26][356080129660231][15031 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-07 07:27:26][356080129660231][15031 ms][DEBUG] END runCmdUntilRes#2 in 5140 ms [2025-09-07 07:27:26][356080129660231][15031 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:32:03][357962501230528][1 ms][INFO] === Request start === [2025-09-07 07:32:03][357962501230528][1 ms][DEBUG] START check_scloud [2025-09-07 07:32:03][357962501230528][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:32:03][357962501230528][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25244 4967 23623628 127752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:32:03][357962501230528][308 ms][DEBUG] targetPkg: running [2025-09-07 07:32:03][357962501230528][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 07:32:03][357962501230528][308 ms][DEBUG] START check_boot_completed [2025-09-07 07:32:03][357962501230528][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:32:03][357962501230528][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:32:03][357962501230528][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:32:03][357962501230528][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:32:03][357962501230528][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:32:03][357962501230528][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:32:03][357962501230528][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2917\nsuccessfulTxPacketsPerSecond: 0.38384032242587085\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.1290497635742152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2675\nsuccessfulRxPacketsPerSecond: 0.33751476627102434\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:32:03][357962501230528][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:32:05][357962501230528][1980 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.262/301.262/301.262/0.000 ms\n [2025-09-07 07:32:05][357962501230528][1980 ms][DEBUG] check_internet: online [2025-09-07 07:32:05][357962501230528][1980 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:32:05][357962501230528][1980 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501230528\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3944\"}'\'' -e'"" [2025-09-07 07:32:05][357962501230528][1980 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:32:05][357962501230528][1980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501230528\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3944\"}'\'' -e'"" [2025-09-07 07:32:08][357962501230528][5666 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1373db06-b3b9-4052-b0e6-fa65bf8abe19","id":"QR_1373db06-b3b9-4052-b0e6-fa65bf8abe19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:32:09][357962501230528][5822 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-07 07:32:09][357962501230528][5822 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-07 07:32:09][357962501230528][5822 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:32:11][357962501230528][0 ms][INFO] === Request start === [2025-09-07 07:32:11][357962501230528][1 ms][DEBUG] START check_scloud [2025-09-07 07:32:11][357962501230528][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:32:11][357962501230528][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 25244 4967 23761748 138552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:32:11][357962501230528][322 ms][DEBUG] targetPkg: running [2025-09-07 07:32:11][357962501230528][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 07:32:11][357962501230528][322 ms][DEBUG] START check_boot_completed [2025-09-07 07:32:11][357962501230528][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:32:11][357962501230528][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:32:11][357962501230528][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:32:11][357962501230528][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:32:11][357962501230528][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:32:11][357962501230528][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:32:12][357962501230528][509 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2917\nsuccessfulTxPacketsPerSecond: 0.38384032242587085\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.1290497635742152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2675\nsuccessfulRxPacketsPerSecond: 0.33751476627102434\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:32:12][357962501230528][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:32:12][357962501230528][853 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.918/226.918/226.918/0.000 ms\n [2025-09-07 07:32:12][357962501230528][853 ms][DEBUG] check_internet: online [2025-09-07 07:32:12][357962501230528][853 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:32:12][357962501230528][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501230528\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4732\"}'\'' -e'"" [2025-09-07 07:32:12][357962501230528][853 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:32:12][357962501230528][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501230528\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4732\"}'\'' -e'"" [2025-09-07 07:32:17][357962501230528][5851 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7362652-59a9-4c18-8dc5-d24f37d2c1d7","id":"QR_e7362652-59a9-4c18-8dc5-d24f37d2c1d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:32:17][357962501230528][6008 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-07 07:32:17][357962501230528][6008 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-07 07:32:17][357962501230528][6008 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:32:21][351240641880692][0 ms][INFO] === Request start === [2025-09-07 07:32:21][351240641880692][1 ms][DEBUG] START check_scloud [2025-09-07 07:32:21][351240641880692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:32:21][351240641880692][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 25244 4967 23930908 150348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:32:21][351240641880692][261 ms][DEBUG] targetPkg: running [2025-09-07 07:32:21][351240641880692][261 ms][DEBUG] END check_scloud in 261 ms [2025-09-07 07:32:21][351240641880692][261 ms][DEBUG] START check_boot_completed [2025-09-07 07:32:21][351240641880692][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:32:22][351240641880692][324 ms][DEBUG] ADB: done in 62 ms; out [2025-09-07 07:32:22][351240641880692][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:32:22][351240641880692][386 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:32:22][351240641880692][386 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 07:32:22][351240641880692][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:32:22][351240641880692][542 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2917\nsuccessfulTxPacketsPerSecond: 0.38384032242587085\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.1290497635742152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2675\nsuccessfulRxPacketsPerSecond: 0.33751476627102434\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:32:22][351240641880692][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:32:22][351240641880692][949 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.363/266.363/266.363/0.000 ms\n [2025-09-07 07:32:22][351240641880692][949 ms][DEBUG] check_internet: online [2025-09-07 07:32:22][351240641880692][949 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:32:22][351240641880692][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641880692\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7481\"}'\'' -e'"" [2025-09-07 07:32:22][351240641880692][949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:32:22][351240641880692][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641880692\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7481\"}'\'' -e'"" [2025-09-07 07:32:25][351240641880692][4151 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f151aa4d-666b-4731-b14a-234a0d46faa8","id":"QR_f151aa4d-666b-4731-b14a-234a0d46faa8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:32:26][351240641880692][4307 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=3343 [2025-09-07 07:32:26][351240641880692][4307 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-09-07 07:32:26][351240641880692][4307 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:32:28][351240641880692][0 ms][INFO] === Request start === [2025-09-07 07:32:28][351240641880692][1 ms][DEBUG] START check_scloud [2025-09-07 07:32:28][351240641880692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:32:28][351240641880692][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 25244 4967 24060992 161284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:32:28][351240641880692][314 ms][DEBUG] targetPkg: running [2025-09-07 07:32:28][351240641880692][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 07:32:28][351240641880692][314 ms][DEBUG] START check_boot_completed [2025-09-07 07:32:28][351240641880692][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:32:28][351240641880692][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:32:28][351240641880692][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:32:28][351240641880692][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:32:28][351240641880692][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:32:28][351240641880692][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:32:28][351240641880692][532 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2917\nsuccessfulTxPacketsPerSecond: 0.38384032242587085\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.1290497635742152\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2675\nsuccessfulRxPacketsPerSecond: 0.33751476627102434\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:32:28][351240641880692][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:32:29][351240641880692][922 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.754/278.754/278.754/0.000 ms\n [2025-09-07 07:32:29][351240641880692][923 ms][DEBUG] check_internet: online [2025-09-07 07:32:29][351240641880692][923 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:32:29][351240641880692][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641880692\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6802\"}'\'' -e'"" [2025-09-07 07:32:29][351240641880692][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:32:29][351240641880692][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641880692\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6802\"}'\'' -e'"" [2025-09-07 07:32:33][351240641880692][5656 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1c61357-3e92-476d-93c8-f80135b13697","id":"QR_f1c61357-3e92-476d-93c8-f80135b13697","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:32:34][351240641880692][5812 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-07 07:32:34][351240641880692][5812 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-07 07:32:34][351240641880692][5812 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:33:03][350517923758261][0 ms][INFO] === Request start === [2025-09-07 07:33:03][350517923758261][1 ms][DEBUG] START check_scloud [2025-09-07 07:33:03][350517923758261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:33:04][350517923758261][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 25244 4967 24152284 172436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:33:04][350517923758261][305 ms][DEBUG] targetPkg: running [2025-09-07 07:33:04][350517923758261][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 07:33:04][350517923758261][305 ms][DEBUG] START check_boot_completed [2025-09-07 07:33:04][350517923758261][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:33:04][350517923758261][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:33:04][350517923758261][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:33:04][350517923758261][446 ms][DEBUG] SU: done in 93 ms; out [2025-09-07 07:33:04][350517923758261][446 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 07:33:04][350517923758261][446 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:33:04][350517923758261][446 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517923758261\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4506\"}'\'' -e'"" [2025-09-07 07:33:04][350517923758261][446 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:33:04][350517923758261][446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517923758261\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4506\"}'\'' -e'"" [2025-09-07 07:33:07][350517923758261][3898 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf52b3c3-d70e-494d-8c11-e707ee476c3a","id":"QR_cf52b3c3-d70e-494d-8c11-e707ee476c3a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:33:07][350517923758261][4054 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-07 07:33:07][350517923758261][4054 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-07 07:33:07][350517923758261][4054 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:33:10][350517923758261][0 ms][INFO] === Request start === [2025-09-07 07:33:10][350517923758261][1 ms][DEBUG] START check_scloud [2025-09-07 07:33:10][350517923758261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:33:10][350517923758261][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 25244 4967 24302948 184188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:33:10][350517923758261][305 ms][DEBUG] targetPkg: running [2025-09-07 07:33:10][350517923758261][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 07:33:10][350517923758261][305 ms][DEBUG] START check_boot_completed [2025-09-07 07:33:10][350517923758261][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:33:10][350517923758261][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:33:10][350517923758261][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:33:10][350517923758261][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 07:33:10][350517923758261][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 07:33:10][350517923758261][400 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:33:10][350517923758261][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517923758261\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3196\"}'\'' -e'"" [2025-09-07 07:33:10][350517923758261][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:33:10][350517923758261][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517923758261\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3196\"}'\'' -e'"" [2025-09-07 07:33:15][350517923758261][5101 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3c03cd6-c5f1-4e23-8707-64b6a467e22a","id":"QR_c3c03cd6-c5f1-4e23-8707-64b6a467e22a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:33:15][350517923758261][5257 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-07 07:33:15][350517923758261][5257 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-09-07 07:33:15][350517923758261][5257 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:35:03][353182209397651][1 ms][INFO] === Request start === [2025-09-07 07:35:03][353182209397651][1 ms][DEBUG] START check_scloud [2025-09-07 07:35:03][353182209397651][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:35:03][353182209397651][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 25244 4967 24440356 195384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:35:03][353182209397651][240 ms][DEBUG] targetPkg: running [2025-09-07 07:35:03][353182209397651][240 ms][DEBUG] END check_scloud in 238 ms [2025-09-07 07:35:03][353182209397651][240 ms][DEBUG] START check_boot_completed [2025-09-07 07:35:03][353182209397651][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:35:03][353182209397651][270 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:35:03][353182209397651][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:35:03][353182209397651][318 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:35:03][353182209397651][318 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:35:03][353182209397651][318 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:35:03][353182209397651][318 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182209397651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5459\"}'\'' -e'"" [2025-09-07 07:35:03][353182209397651][318 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:35:03][353182209397651][318 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182209397651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5459\"}'\'' -e'"" [2025-09-07 07:35:08][353182209397651][4957 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e24a3b79-edf3-49a9-a381-4c00653cca9d","id":"QR_e24a3b79-edf3-49a9-a381-4c00653cca9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:35:08][353182209397651][5113 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-07 07:35:08][353182209397651][5113 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-07 07:35:08][353182209397651][5113 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:35:10][353182209397651][0 ms][INFO] === Request start === [2025-09-07 07:35:10][353182209397651][1 ms][DEBUG] START check_scloud [2025-09-07 07:35:10][353182209397651][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:35:10][353182209397651][264 ms][DEBUG] SU: done in 264 ms; outu0_a118 25244 4967 24613036 207124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:35:10][353182209397651][264 ms][DEBUG] targetPkg: running [2025-09-07 07:35:10][353182209397651][264 ms][DEBUG] END check_scloud in 264 ms [2025-09-07 07:35:10][353182209397651][264 ms][DEBUG] START check_boot_completed [2025-09-07 07:35:10][353182209397651][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:35:11][353182209397651][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:35:11][353182209397651][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:35:11][353182209397651][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:35:11][353182209397651][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:35:11][353182209397651][343 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:35:11][353182209397651][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182209397651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2512\"}'\'' -e'"" [2025-09-07 07:35:11][353182209397651][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:35:11][353182209397651][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182209397651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2512\"}'\'' -e'"" [2025-09-07 07:35:16][353182209397651][5357 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f0e88dd-5376-4049-9088-589de2bbb740","id":"QR_7f0e88dd-5376-4049-9088-589de2bbb740","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:35:16][353182209397651][5513 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-07 07:35:16][353182209397651][5513 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-07 07:35:16][353182209397651][5513 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:38:04][355870666542714][1 ms][INFO] === Request start === [2025-09-07 07:38:04][355870666542714][1 ms][DEBUG] START check_scloud [2025-09-07 07:38:04][355870666542714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:38:04][355870666542714][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 25244 4967 24736940 217796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:38:04][355870666542714][294 ms][DEBUG] targetPkg: running [2025-09-07 07:38:04][355870666542714][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 07:38:04][355870666542714][294 ms][DEBUG] START check_boot_completed [2025-09-07 07:38:04][355870666542714][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:38:04][355870666542714][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:38:04][355870666542714][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:38:04][355870666542714][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:38:04][355870666542714][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:38:04][355870666542714][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:38:04][355870666542714][484 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3063\nsuccessfulTxPacketsPerSecond: 0.48473902115919026\nretriedTxPackets: 724\nretriedTxPacketsPerSecond: 0.15272599296796407\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2802\nsuccessfulRxPacketsPerSecond: 0.42165654580285733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:38:04][355870666542714][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:38:05][355870666542714][1888 ms][DEBUG] SU: done in 1404 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.526/291.526/291.526/0.000 ms\n [2025-09-07 07:38:05][355870666542714][1888 ms][DEBUG] check_internet: online [2025-09-07 07:38:05][355870666542714][1888 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:38:05][355870666542714][1888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355870666542714\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1795\"}'\'' -e'"" [2025-09-07 07:38:05][355870666542714][1888 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:38:05][355870666542714][1888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355870666542714\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1795\"}'\'' -e'"" [2025-09-07 07:38:09][355870666542714][5605 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96a5c5db-83e6-428f-8731-5cfe05f85951","id":"QR_96a5c5db-83e6-428f-8731-5cfe05f85951","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:38:09][355870666542714][5762 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-07 07:38:09][355870666542714][5762 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-07 07:38:09][355870666542714][5762 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:38:12][355870666542714][0 ms][INFO] === Request start === [2025-09-07 07:38:12][355870666542714][1 ms][DEBUG] START check_scloud [2025-09-07 07:38:12][355870666542714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:38:12][355870666542714][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 25244 4967 24889652 229828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:38:12][355870666542714][268 ms][DEBUG] targetPkg: running [2025-09-07 07:38:12][355870666542714][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-07 07:38:12][355870666542714][268 ms][DEBUG] START check_boot_completed [2025-09-07 07:38:12][355870666542714][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:38:12][355870666542714][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:38:12][355870666542714][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:38:12][355870666542714][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:38:12][355870666542714][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:38:12][355870666542714][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:38:12][355870666542714][471 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3063\nsuccessfulTxPacketsPerSecond: 0.48473902115919026\nretriedTxPackets: 724\nretriedTxPacketsPerSecond: 0.15272599296796407\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2802\nsuccessfulRxPacketsPerSecond: 0.42165654580285733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:38:12][355870666542714][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:38:12][355870666542714][830 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.221/259.221/259.221/0.000 ms\n [2025-09-07 07:38:12][355870666542714][830 ms][DEBUG] check_internet: online [2025-09-07 07:38:12][355870666542714][830 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:38:12][355870666542714][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355870666542714\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5632\"}'\'' -e'"" [2025-09-07 07:38:12][355870666542714][830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:38:12][355870666542714][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355870666542714\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5632\"}'\'' -e'"" [2025-09-07 07:38:18][355870666542714][6188 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79488da3-0232-4484-a5d1-ea5ba6eb90f8","id":"QR_79488da3-0232-4484-a5d1-ea5ba6eb90f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:38:18][355870666542714][6344 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 07:38:18][355870666542714][6344 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 07:38:18][355870666542714][6345 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:39:03][357040734786341][0 ms][INFO] === Request start === [2025-09-07 07:39:03][357040734786341][1 ms][DEBUG] START check_scloud [2025-09-07 07:39:03][357040734786341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:39:04][357040734786341][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 25244 4967 24978932 241024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:39:04][357040734786341][258 ms][DEBUG] targetPkg: running [2025-09-07 07:39:04][357040734786341][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-07 07:39:04][357040734786341][258 ms][DEBUG] START check_boot_completed [2025-09-07 07:39:04][357040734786341][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:39:04][357040734786341][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:39:04][357040734786341][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:39:04][357040734786341][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:39:04][357040734786341][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:39:04][357040734786341][352 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:39:04][357040734786341][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040734786341\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7222\"}'\'' -e'"" [2025-09-07 07:39:04][357040734786341][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:39:04][357040734786341][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040734786341\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7222\"}'\'' -e'"" [2025-09-07 07:39:07][357040734786341][4070 ms][DEBUG] proc_open done in 3718 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 07:39:07][357040734786341][4070 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-09-07 07:39:07][357040734786341][4070 ms][WARN] Detected error: Process with pid 25244 either refused to load frida-agent, or terminated during injectionProcess with pid 25244 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 07:39:07][357040734786341][4070 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 07:39:08][357040734786341][4335 ms][DEBUG] SU: done in 265 ms; outsystem 5395 4967 12420428 184232 ep_poll 0 S system_server\n [2025-09-07 07:39:08][357040734786341][4335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 07:39:08][357040734786341][4476 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 07:39:08][357040734786341][4476 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 07:39:08][357040734786341][4476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 07:39:08][357040734786341][4632 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 07:39:08][357040734786341][4632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 07:39:08][357040734786341][4819 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 07:39:10][357040734786341][6834 ms][DEBUG] START check_boot_completed [2025-09-07 07:39:10][357040734786341][6834 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:39:10][357040734786341][6882 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:39:10][357040734786341][6882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:39:10][357040734786341][6944 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:39:10][357040734786341][6944 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 07:39:13][357040734786341][9959 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 07:39:13][357040734786341][9959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040734786341\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7222\"}'\'' -e'"" [2025-09-07 07:39:18][357040734786341][14661 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1adfcfd1-defe-4c49-931d-f262babad437","id":"QR_1adfcfd1-defe-4c49-931d-f262babad437","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:39:18][357040734786341][14817 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-07 07:39:18][357040734786341][14817 ms][DEBUG] END runCmdUntilRes#2 in 4858 ms [2025-09-07 07:39:18][357040734786341][14817 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:43:03][350637544992790][1 ms][INFO] === Request start === [2025-09-07 07:43:03][350637544992790][1 ms][DEBUG] START check_scloud [2025-09-07 07:43:03][350637544992790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:43:03][350637544992790][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 26711 4967 23649736 126944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:43:03][350637544992790][262 ms][DEBUG] targetPkg: running [2025-09-07 07:43:03][350637544992790][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-07 07:43:03][350637544992790][262 ms][DEBUG] START check_boot_completed [2025-09-07 07:43:03][350637544992790][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:43:03][350637544992790][293 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:43:03][350637544992790][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:43:03][350637544992790][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:43:03][350637544992790][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:43:03][350637544992790][341 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:43:03][350637544992790][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544992790\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3557\"}'\'' -e'"" [2025-09-07 07:43:03][350637544992790][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:43:03][350637544992790][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544992790\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3557\"}'\'' -e'"" [2025-09-07 07:43:08][350637544992790][4917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e27d90b7-6e24-47b5-8b31-4639ea7b0fbb","id":"QR_e27d90b7-6e24-47b5-8b31-4639ea7b0fbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:43:08][350637544992790][5073 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-07 07:43:08][350637544992790][5073 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-07 07:43:08][350637544992790][5073 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:43:11][350637544992790][0 ms][INFO] === Request start === [2025-09-07 07:43:11][350637544992790][1 ms][DEBUG] START check_scloud [2025-09-07 07:43:11][350637544992790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:43:11][350637544992790][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 26711 4967 23794192 137904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:43:11][350637544992790][294 ms][DEBUG] targetPkg: running [2025-09-07 07:43:11][350637544992790][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 07:43:11][350637544992790][294 ms][DEBUG] START check_boot_completed [2025-09-07 07:43:11][350637544992790][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:43:11][350637544992790][340 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:43:11][350637544992790][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:43:11][350637544992790][403 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:43:11][350637544992790][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:43:11][350637544992790][403 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:43:11][350637544992790][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544992790\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4046\"}'\'' -e'"" [2025-09-07 07:43:11][350637544992790][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:43:11][350637544992790][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544992790\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4046\"}'\'' -e'"" [2025-09-07 07:43:16][350637544992790][5495 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_160eb52e-cb7a-41e6-a944-a68aabda9bff","id":"QR_160eb52e-cb7a-41e6-a944-a68aabda9bff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:43:16][350637544992790][5651 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-07 07:43:16][350637544992790][5652 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-07 07:43:16][350637544992790][5652 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:46:03][350178737288969][1 ms][INFO] === Request start === [2025-09-07 07:46:03][350178737288969][1 ms][DEBUG] START check_scloud [2025-09-07 07:46:03][350178737288969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:46:03][350178737288969][334 ms][DEBUG] SU: done in 332 ms; outu0_a118 26711 4967 23973448 149936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:46:03][350178737288969][334 ms][DEBUG] targetPkg: running [2025-09-07 07:46:03][350178737288969][334 ms][DEBUG] END check_scloud in 333 ms [2025-09-07 07:46:03][350178737288969][334 ms][DEBUG] START check_boot_completed [2025-09-07 07:46:03][350178737288969][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:46:03][350178737288969][380 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:46:03][350178737288969][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:46:03][350178737288969][443 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:46:03][350178737288969][443 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:46:03][350178737288969][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:46:03][350178737288969][552 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3277\nsuccessfulTxPacketsPerSecond: 0.1960940719764953\nretriedTxPackets: 802\nretriedTxPacketsPerSecond: 0.06647256677169332\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2978\nsuccessfulRxPacketsPerSecond: 0.1661814169292333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:46:03][350178737288969][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:46:05][350178737288969][1911 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.207/306.207/306.207/0.000 ms\n [2025-09-07 07:46:05][350178737288969][1911 ms][DEBUG] check_internet: online [2025-09-07 07:46:05][350178737288969][1911 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:46:05][350178737288969][1912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737288969\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1598\"}'\'' -e'"" [2025-09-07 07:46:05][350178737288969][1912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:46:05][350178737288969][1912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737288969\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1598\"}'\'' -e'"" [2025-09-07 07:46:08][350178737288969][5707 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea45d6e5-bea5-43ca-90cd-fc6db0b594e8","id":"QR_ea45d6e5-bea5-43ca-90cd-fc6db0b594e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:46:09][350178737288969][5863 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-09-07 07:46:09][350178737288969][5863 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-07 07:46:09][350178737288969][5863 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:46:11][350178737288969][0 ms][INFO] === Request start === [2025-09-07 07:46:11][350178737288969][1 ms][DEBUG] START check_scloud [2025-09-07 07:46:11][350178737288969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:46:11][350178737288969][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 26711 4967 24103696 160812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:46:11][350178737288969][309 ms][DEBUG] targetPkg: running [2025-09-07 07:46:11][350178737288969][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 07:46:11][350178737288969][309 ms][DEBUG] START check_boot_completed [2025-09-07 07:46:11][350178737288969][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:46:11][350178737288969][339 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 07:46:11][350178737288969][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:46:11][350178737288969][388 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 07:46:11][350178737288969][388 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 07:46:11][350178737288969][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:46:11][350178737288969][511 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3277\nsuccessfulTxPacketsPerSecond: 0.1960940719764953\nretriedTxPackets: 802\nretriedTxPacketsPerSecond: 0.06647256677169332\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2978\nsuccessfulRxPacketsPerSecond: 0.1661814169292333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:46:11][350178737288969][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:46:12][350178737288969][902 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.608/285.608/285.608/0.000 ms\n [2025-09-07 07:46:12][350178737288969][902 ms][DEBUG] check_internet: online [2025-09-07 07:46:12][350178737288969][902 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:46:12][350178737288969][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737288969\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2204\"}'\'' -e'"" [2025-09-07 07:46:12][350178737288969][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:46:12][350178737288969][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737288969\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2204\"}'\'' -e'"" [2025-09-07 07:46:17][350178737288969][6056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_892ddc18-6c35-4635-9015-0516fffb1ba2","id":"QR_892ddc18-6c35-4635-9015-0516fffb1ba2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:46:17][350178737288969][6213 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 07:46:17][350178737288969][6213 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 07:46:17][350178737288969][6213 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:48:03][350383060670862][0 ms][INFO] === Request start === [2025-09-07 07:48:03][350383060670862][1 ms][DEBUG] START check_scloud [2025-09-07 07:48:03][350383060670862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:48:04][350383060670862][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 26711 4967 24242132 171796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:48:04][350383060670862][281 ms][DEBUG] targetPkg: running [2025-09-07 07:48:04][350383060670862][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-07 07:48:04][350383060670862][281 ms][DEBUG] START check_boot_completed [2025-09-07 07:48:04][350383060670862][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:48:04][350383060670862][312 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:48:04][350383060670862][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:48:04][350383060670862][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:48:04][350383060670862][359 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:48:04][350383060670862][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:48:04][350383060670862][484 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3277\nsuccessfulTxPacketsPerSecond: 0.1960940719764953\nretriedTxPackets: 802\nretriedTxPacketsPerSecond: 0.06647256677169332\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2978\nsuccessfulRxPacketsPerSecond: 0.1661814169292333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:48:04][350383060670862][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:48:04][350383060670862][937 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=344 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 344.813/344.813/344.813/0.000 ms\n [2025-09-07 07:48:04][350383060670862][937 ms][DEBUG] check_internet: online [2025-09-07 07:48:04][350383060670862][937 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:48:04][350383060670862][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350383060670862\",\"model\":\"SM-S908J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3680\"}'\'' -e'"" [2025-09-07 07:48:04][350383060670862][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:48:04][350383060670862][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350383060670862\",\"model\":\"SM-S908J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3680\"}'\'' -e'"" [2025-09-07 07:48:09][350383060670862][5405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87e5351d-eaae-4d59-b28b-5af742de88e5","id":"QR_87e5351d-eaae-4d59-b28b-5af742de88e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:48:09][350383060670862][5561 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-09-07 07:48:09][350383060670862][5561 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-09-07 07:48:09][350383060670862][5561 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:48:11][350383060670862][1 ms][INFO] === Request start === [2025-09-07 07:48:11][350383060670862][1 ms][DEBUG] START check_scloud [2025-09-07 07:48:11][350383060670862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:48:11][350383060670862][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 26711 4967 24403100 183568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:48:11][350383060670862][293 ms][DEBUG] targetPkg: running [2025-09-07 07:48:11][350383060670862][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-07 07:48:11][350383060670862][293 ms][DEBUG] START check_boot_completed [2025-09-07 07:48:11][350383060670862][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:48:11][350383060670862][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:48:11][350383060670862][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:48:12][350383060670862][402 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:48:12][350383060670862][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:48:12][350383060670862][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:48:12][350383060670862][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31064 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3277\nsuccessfulTxPacketsPerSecond: 0.1960940719764953\nretriedTxPackets: 802\nretriedTxPacketsPerSecond: 0.06647256677169332\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2978\nsuccessfulRxPacketsPerSecond: 0.1661814169292333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:48:12][350383060670862][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:48:12][350383060670862][855 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.490/226.490/226.490/0.000 ms\n [2025-09-07 07:48:12][350383060670862][855 ms][DEBUG] check_internet: online [2025-09-07 07:48:12][350383060670862][855 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:48:12][350383060670862][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350383060670862\",\"model\":\"SM-S908J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3493\"}'\'' -e'"" [2025-09-07 07:48:12][350383060670862][855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:48:12][350383060670862][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350383060670862\",\"model\":\"SM-S908J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3493\"}'\'' -e'"" [2025-09-07 07:48:17][350383060670862][5760 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6984570d-3359-4ed6-94af-947ff9939ae4","id":"QR_6984570d-3359-4ed6-94af-947ff9939ae4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:48:17][350383060670862][5916 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-07 07:48:17][350383060670862][5916 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-07 07:48:17][350383060670862][5916 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:49:04][351723300609239][0 ms][INFO] === Request start === [2025-09-07 07:49:04][351723300609239][1 ms][DEBUG] START check_scloud [2025-09-07 07:49:04][351723300609239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:49:04][351723300609239][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 26711 4967 24549532 194620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:49:04][351723300609239][302 ms][DEBUG] targetPkg: running [2025-09-07 07:49:04][351723300609239][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 07:49:04][351723300609239][302 ms][DEBUG] START check_boot_completed [2025-09-07 07:49:04][351723300609239][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:49:04][351723300609239][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:49:04][351723300609239][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:49:04][351723300609239][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:49:04][351723300609239][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 07:49:04][351723300609239][396 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:49:04][351723300609239][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9496\"}'\'' -e'"" [2025-09-07 07:49:04][351723300609239][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:49:04][351723300609239][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9496\"}'\'' -e'"" [2025-09-07 07:49:07][351723300609239][3832 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92b927d8-0164-4537-a9e8-f33faf5936e5","id":"QR_92b927d8-0164-4537-a9e8-f33faf5936e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:49:08][351723300609239][3988 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-07 07:49:08][351723300609239][3988 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-07 07:49:08][351723300609239][3989 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:49:10][351723300609239][0 ms][INFO] === Request start === [2025-09-07 07:49:10][351723300609239][1 ms][DEBUG] START check_scloud [2025-09-07 07:49:10][351723300609239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:49:10][351723300609239][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 26711 4967 24720676 206424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:49:10][351723300609239][282 ms][DEBUG] targetPkg: running [2025-09-07 07:49:10][351723300609239][282 ms][DEBUG] END check_scloud in 282 ms [2025-09-07 07:49:10][351723300609239][283 ms][DEBUG] START check_boot_completed [2025-09-07 07:49:10][351723300609239][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:49:10][351723300609239][329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:49:10][351723300609239][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:49:10][351723300609239][392 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:49:10][351723300609239][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:49:10][351723300609239][392 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:49:10][351723300609239][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8390\"}'\'' -e'"" [2025-09-07 07:49:10][351723300609239][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:49:10][351723300609239][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300609239\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8390\"}'\'' -e'"" [2025-09-07 07:49:15][351723300609239][4984 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39f6fe4a-a141-4447-a5d5-293cc080a694","id":"QR_39f6fe4a-a141-4447-a5d5-293cc080a694","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:49:15][351723300609239][5140 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-07 07:49:15][351723300609239][5140 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-07 07:49:15][351723300609239][5140 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:53:03][352469854674588][1 ms][INFO] === Request start === [2025-09-07 07:53:03][352469854674588][1 ms][DEBUG] START check_scloud [2025-09-07 07:53:03][352469854674588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:53:03][352469854674588][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 26711 4967 24846820 217696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:53:03][352469854674588][255 ms][DEBUG] targetPkg: running [2025-09-07 07:53:03][352469854674588][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-07 07:53:03][352469854674588][255 ms][DEBUG] START check_boot_completed [2025-09-07 07:53:03][352469854674588][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:53:03][352469854674588][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 07:53:03][352469854674588][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:53:03][352469854674588][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:53:03][352469854674588][333 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 07:53:03][352469854674588][333 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:53:03][352469854674588][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854674588\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3640\"}'\'' -e'"" [2025-09-07 07:53:03][352469854674588][333 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:53:03][352469854674588][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854674588\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3640\"}'\'' -e'"" [2025-09-07 07:53:07][352469854674588][4598 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21c8903e-3343-434f-95ff-3044a475b1f9","id":"QR_21c8903e-3343-434f-95ff-3044a475b1f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:53:08][352469854674588][4754 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-09-07 07:53:08][352469854674588][4754 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-09-07 07:53:08][352469854674588][4755 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:53:10][352469854674588][0 ms][INFO] === Request start === [2025-09-07 07:53:10][352469854674588][1 ms][DEBUG] START check_scloud [2025-09-07 07:53:10][352469854674588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:53:10][352469854674588][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 26711 4967 24991404 229340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:53:10][352469854674588][289 ms][DEBUG] targetPkg: running [2025-09-07 07:53:10][352469854674588][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 07:53:10][352469854674588][289 ms][DEBUG] START check_boot_completed [2025-09-07 07:53:10][352469854674588][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:53:10][352469854674588][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 07:53:10][352469854674588][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:53:10][352469854674588][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:53:10][352469854674588][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 07:53:10][352469854674588][383 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:53:10][352469854674588][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854674588\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7894\"}'\'' -e'"" [2025-09-07 07:53:10][352469854674588][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:53:10][352469854674588][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854674588\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7894\"}'\'' -e'"" [2025-09-07 07:53:16][352469854674588][5506 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2ceda65-9360-4e27-9539-510b5250f3e1","id":"QR_f2ceda65-9360-4e27-9539-510b5250f3e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:53:16][352469854674588][5662 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-07 07:53:16][352469854674588][5662 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-09-07 07:53:16][352469854674588][5662 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:53:20][359259104318612][0 ms][INFO] === Request start === [2025-09-07 07:53:20][359259104318612][1 ms][DEBUG] START check_scloud [2025-09-07 07:53:20][359259104318612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:53:20][359259104318612][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 26711 4967 25170676 240348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:53:20][359259104318612][308 ms][DEBUG] targetPkg: running [2025-09-07 07:53:20][359259104318612][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 07:53:20][359259104318612][309 ms][DEBUG] START check_boot_completed [2025-09-07 07:53:20][359259104318612][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:53:20][359259104318612][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:53:20][359259104318612][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:53:20][359259104318612][449 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 07:53:20][359259104318612][449 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 07:53:20][359259104318612][449 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:53:20][359259104318612][449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104318612\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5068\"}'\'' -e'"" [2025-09-07 07:53:20][359259104318612][449 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:53:20][359259104318612][449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104318612\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5068\"}'\'' -e'"" [2025-09-07 07:53:24][359259104318612][4198 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 07:53:24][359259104318612][4198 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-07 07:53:24][359259104318612][4198 ms][WARN] Detected error: Process with pid 26711 either refused to load frida-agent, or terminated during injectionProcess with pid 26711 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 07:53:24][359259104318612][4198 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 07:53:24][359259104318612][4479 ms][DEBUG] SU: done in 281 ms; outsystem 5395 4967 12535708 209168 ep_poll 0 S system_server\nsystem 28181 1 12335084 125276 ptrace_stop 0 t system_server\n [2025-09-07 07:53:24][359259104318612][4479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 07:53:25][359259104318612][4620 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 07:53:25][359259104318612][4620 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 07:53:25][359259104318612][4620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 07:53:25][359259104318612][4745 ms][DEBUG] SU: done in 124 ms; out [2025-09-07 07:53:25][359259104318612][4745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 07:53:25][359259104318612][4932 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 07:53:27][359259104318612][6947 ms][DEBUG] START check_boot_completed [2025-09-07 07:53:27][359259104318612][6947 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:53:27][359259104318612][6994 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:53:27][359259104318612][6994 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:53:27][359259104318612][7041 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 07:53:27][359259104318612][7041 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 07:53:30][359259104318612][10056 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 07:53:30][359259104318612][10056 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104318612\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5068\"}'\'' -e'"" [2025-09-07 07:53:31][359259104318612][10587 ms][DEBUG] proc_open done in 531 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-07 07:53:31][359259104318612][10587 ms][DEBUG] END runCmdUntilRes#2 in 532 ms [2025-09-07 07:53:31][359259104318612][10587 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-07 07:53:31][359259104318612][10587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 07:53:31][359259104318612][10868 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 07:54:03][359259104318612][0 ms][INFO] === Request start === [2025-09-07 07:54:03][359259104318612][1 ms][DEBUG] START check_scloud [2025-09-07 07:54:03][359259104318612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:54:03][359259104318612][432 ms][DEBUG] SU: done in 431 ms; out [2025-09-07 07:54:03][359259104318612][432 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 07:54:03][359259104318612][479 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 07:54:03][359259104318612][479 ms][DEBUG] check_devices: device found [2025-09-07 07:54:03][359259104318612][479 ms][WARN] targetPkg: not running, restarting [2025-09-07 07:54:03][359259104318612][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 07:54:03][359259104318612][620 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 07:54:03][359259104318612][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 07:54:04][359259104318612][1182 ms][DEBUG] SU: done in 562 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 07:54:06][359259104318612][3197 ms][DEBUG] END check_scloud in 3196 ms [2025-09-07 07:54:06][359259104318612][3197 ms][DEBUG] START check_boot_completed [2025-09-07 07:54:06][359259104318612][3197 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:54:06][359259104318612][3244 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:54:06][359259104318612][3244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:54:06][359259104318612][3338 ms][DEBUG] SU: done in 93 ms; out [2025-09-07 07:54:06][359259104318612][3338 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-07 07:54:06][359259104318612][3338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:54:07][359259104318612][3666 ms][DEBUG] SU: done in 328 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7433348 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 56\nsuccessfulTxPacketsPerSecond: 11.179592068823546\nretriedTxPackets: 2\nretriedTxPacketsPerSecond: 0.4078204494803737\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 45\nsuccessfulRxPacketsPerSecond: 9.053001840775133\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:54:07][359259104318612][3666 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:54:08][359259104318612][4681 ms][DEBUG] SU: done in 1015 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.514/219.514/219.514/0.000 ms\n [2025-09-07 07:54:08][359259104318612][4681 ms][DEBUG] check_internet: online [2025-09-07 07:54:08][359259104318612][4681 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:54:08][359259104318612][4681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104318612\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7078\"}'\'' -e'"" [2025-09-07 07:54:08][359259104318612][4681 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:54:08][359259104318612][4681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104318612\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7078\"}'\'' -e'"" [2025-09-07 07:54:18][359259104318612][14772 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_924c8fc0-fe6f-4ee7-a335-eecde92c6ecc","id":"QR_924c8fc0-fe6f-4ee7-a335-eecde92c6ecc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:54:18][359259104318612][14929 ms][DEBUG] proc_open done in 10247 ms; code=255; res.len=3343 [2025-09-07 07:54:18][359259104318612][14929 ms][DEBUG] END runCmdUntilRes#1 in 10247 ms [2025-09-07 07:54:18][359259104318612][14929 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:54:20][359259104318612][0 ms][INFO] === Request start === [2025-09-07 07:54:20][359259104318612][1 ms][DEBUG] START check_scloud [2025-09-07 07:54:20][359259104318612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:54:20][359259104318612][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 30713 28354 23760928 113724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:54:20][359259104318612][331 ms][DEBUG] targetPkg: running [2025-09-07 07:54:20][359259104318612][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-07 07:54:20][359259104318612][331 ms][DEBUG] START check_boot_completed [2025-09-07 07:54:20][359259104318612][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:54:20][359259104318612][378 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:54:20][359259104318612][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:54:20][359259104318612][440 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:54:20][359259104318612][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:54:20][359259104318612][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 07:54:21][359259104318612][596 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7433348 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 132\nsuccessfulTxPacketsPerSecond: 6.147019694891102\nretriedTxPackets: 12\nretriedTxPacketsPerSecond: 1.589608371052987\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 126\nsuccessfulRxPacketsPerSecond: 6.2765020179588245\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 07:54:21][359259104318612][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 07:54:21][359259104318612][971 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.250/220.250/220.250/0.000 ms\n [2025-09-07 07:54:21][359259104318612][971 ms][DEBUG] check_internet: online [2025-09-07 07:54:21][359259104318612][971 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:54:21][359259104318612][971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104318612\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8881\"}'\'' -e'"" [2025-09-07 07:54:21][359259104318612][972 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:54:21][359259104318612][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259104318612\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8881\"}'\'' -e'"" [2025-09-07 07:54:22][359259104318612][2237 ms][DEBUG] proc_open done in 1265 ms (timeout); code=4; out.len=0 err.len=52 [2025-09-07 07:54:22][359259104318612][2237 ms][DEBUG] END runCmdUntilRes#1 in 1265 ms [2025-09-07 07:54:22][359259104318612][2237 ms][ERROR] NO RESULT; code=124 outUnable to inject library into process without libc errUnable to inject library into process without libc\r\n [2025-09-07 07:55:03][351240643559781][0 ms][INFO] === Request start === [2025-09-07 07:55:03][351240643559781][1 ms][DEBUG] START check_scloud [2025-09-07 07:55:03][351240643559781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:55:04][351240643559781][424 ms][DEBUG] SU: done in 424 ms; out [2025-09-07 07:55:04][351240643559781][425 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 07:55:04][351240643559781][471 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 07:55:04][351240643559781][471 ms][DEBUG] check_devices: device found [2025-09-07 07:55:04][351240643559781][471 ms][WARN] targetPkg: not running, restarting [2025-09-07 07:55:04][351240643559781][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 07:55:04][351240643559781][612 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 07:55:04][351240643559781][612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 07:55:04][351240643559781][862 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 07:55:06][351240643559781][2877 ms][DEBUG] END check_scloud in 2876 ms [2025-09-07 07:55:06][351240643559781][2877 ms][DEBUG] START check_boot_completed [2025-09-07 07:55:06][351240643559781][2877 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:55:06][351240643559781][2924 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:55:06][351240643559781][2924 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:55:06][351240643559781][2986 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 07:55:06][351240643559781][2986 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 07:55:06][351240643559781][2987 ms][DEBUG] rawBody.length=1150 [2025-09-07 07:55:06][351240643559781][2987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643559781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6151\"}'\'' -e'"" [2025-09-07 07:55:06][351240643559781][2987 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:55:06][351240643559781][2987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643559781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6151\"}'\'' -e'"" [2025-09-07 07:55:12][351240643559781][8672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91ffd20f-48cb-43d8-9a24-e65c5ddb1fe3","id":"QR_91ffd20f-48cb-43d8-9a24-e65c5ddb1fe3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:55:12][351240643559781][8829 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=3343 [2025-09-07 07:55:12][351240643559781][8829 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-09-07 07:55:12][351240643559781][8829 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 07:55:14][351240643559781][1 ms][INFO] === Request start === [2025-09-07 07:55:14][351240643559781][1 ms][DEBUG] START check_scloud [2025-09-07 07:55:14][351240643559781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 07:55:15][351240643559781][358 ms][DEBUG] SU: done in 357 ms; outu0_a118 3939 499 23558240 116808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 07:55:15][351240643559781][358 ms][DEBUG] targetPkg: running [2025-09-07 07:55:15][351240643559781][358 ms][DEBUG] END check_scloud in 357 ms [2025-09-07 07:55:15][351240643559781][358 ms][DEBUG] START check_boot_completed [2025-09-07 07:55:15][351240643559781][358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 07:55:15][351240643559781][405 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 07:55:15][351240643559781][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 07:55:15][351240643559781][467 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 07:55:15][351240643559781][467 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 07:55:15][351240643559781][467 ms][DEBUG] rawBody.length=1160 [2025-09-07 07:55:15][351240643559781][467 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643559781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3634\"}'\'' -e'"" [2025-09-07 07:55:15][351240643559781][467 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 07:55:15][351240643559781][467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643559781\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3634\"}'\'' -e'"" [2025-09-07 07:55:21][351240643559781][6450 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8fb32ee-a945-4ce0-9b36-3356816959b8","id":"QR_d8fb32ee-a945-4ce0-9b36-3356816959b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 07:55:21][351240643559781][6606 ms][DEBUG] proc_open done in 6139 ms; code=255; res.len=3343 [2025-09-07 07:55:21][351240643559781][6606 ms][DEBUG] END runCmdUntilRes#1 in 6139 ms [2025-09-07 07:55:21][351240643559781][6607 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:01:04][351234160913604][1 ms][INFO] === Request start === [2025-09-07 08:01:04][351234160913604][1 ms][DEBUG] START check_scloud [2025-09-07 08:01:04][351234160913604][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:01:04][351234160913604][365 ms][DEBUG] SU: done in 364 ms; out [2025-09-07 08:01:04][351234160913604][365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 08:01:04][351234160913604][396 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 08:01:04][351234160913604][396 ms][DEBUG] check_devices: device found [2025-09-07 08:01:04][351234160913604][396 ms][WARN] targetPkg: not running, restarting [2025-09-07 08:01:04][351234160913604][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 08:01:04][351234160913604][521 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 08:01:04][351234160913604][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 08:01:04][351234160913604][771 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 08:01:06][351234160913604][2786 ms][DEBUG] END check_scloud in 2785 ms [2025-09-07 08:01:06][351234160913604][2786 ms][DEBUG] START check_boot_completed [2025-09-07 08:01:06][351234160913604][2786 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:01:06][351234160913604][2833 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:01:06][351234160913604][2833 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:01:06][351234160913604][2880 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:01:06][351234160913604][2880 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 08:01:06][351234160913604][2880 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:01:06][351234160913604][2880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160913604\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-09-07 08:01:06][351234160913604][2880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:01:06][351234160913604][2880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160913604\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-09-07 08:01:12][351234160913604][8816 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 08:01:13][351234160913604][8972 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=115 [2025-09-07 08:01:13][351234160913604][8972 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-07 08:01:13][351234160913604][8972 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 08:01:13][][0 ms][INFO] === Request start === [2025-09-07 08:01:13][][1 ms][DEBUG] START check_scloud [2025-09-07 08:01:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:01:13][][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 17569 7035 23619360 124192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:01:13][][322 ms][DEBUG] targetPkg: running [2025-09-07 08:01:13][][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 08:01:13][][322 ms][DEBUG] START check_boot_completed [2025-09-07 08:01:13][][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:01:13][][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:01:13][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:01:13][][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:01:13][][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:01:13][][400 ms][DEBUG] rawBody.length=1131 [2025-09-07 08:01:13][][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX216HD5Z\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1190\"}'\'' -e'"" [2025-09-07 08:01:13][][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:01:13][][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX216HD5Z\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1190\"}'\'' -e'"" [2025-09-07 08:01:17][][3743 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 08:01:17][][3899 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=115 [2025-09-07 08:01:17][][3899 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-07 08:01:17][][3899 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 08:01:18][351234160913604][0 ms][INFO] === Request start === [2025-09-07 08:01:18][351234160913604][1 ms][DEBUG] START check_scloud [2025-09-07 08:01:18][351234160913604][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:01:19][351234160913604][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 17569 7035 23774184 135960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:01:19][351234160913604][326 ms][DEBUG] targetPkg: running [2025-09-07 08:01:19][351234160913604][326 ms][DEBUG] END check_scloud in 326 ms [2025-09-07 08:01:19][351234160913604][326 ms][DEBUG] START check_boot_completed [2025-09-07 08:01:19][351234160913604][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:01:19][351234160913604][372 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 08:01:19][351234160913604][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:01:19][351234160913604][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:01:19][351234160913604][434 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 08:01:19][351234160913604][434 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:01:19][351234160913604][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160913604\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3440\"}'\'' -e'"" [2025-09-07 08:01:19][351234160913604][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:01:19][351234160913604][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234160913604\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3440\"}'\'' -e'"" [2025-09-07 08:01:24][351234160913604][5511 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12fe1856-3d75-42c7-8cbe-5986e2019c0f","id":"QR_12fe1856-3d75-42c7-8cbe-5986e2019c0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:01:24][351234160913604][5667 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-07 08:01:24][351234160913604][5667 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-07 08:01:24][351234160913604][5667 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:01:28][352938779830806][0 ms][INFO] === Request start === [2025-09-07 08:01:28][352938779830806][1 ms][DEBUG] START check_scloud [2025-09-07 08:01:28][352938779830806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:01:29][352938779830806][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 17569 7035 23948504 149280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:01:29][352938779830806][322 ms][DEBUG] targetPkg: running [2025-09-07 08:01:29][352938779830806][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 08:01:29][352938779830806][322 ms][DEBUG] START check_boot_completed [2025-09-07 08:01:29][352938779830806][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:01:29][352938779830806][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:01:29][352938779830806][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:01:29][352938779830806][431 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 08:01:29][352938779830806][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:01:29][352938779830806][431 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:01:29][352938779830806][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938779830806\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4037\"}'\'' -e'"" [2025-09-07 08:01:29][352938779830806][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:01:29][352938779830806][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938779830806\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4037\"}'\'' -e'"" [2025-09-07 08:01:32][352938779830806][3914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27653f11-eb20-4cf2-b52c-ed5a6133d128","id":"QR_27653f11-eb20-4cf2-b52c-ed5a6133d128","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:01:32][352938779830806][4071 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-07 08:01:32][352938779830806][4071 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-07 08:01:32][352938779830806][4071 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:01:35][352938779830806][0 ms][INFO] === Request start === [2025-09-07 08:01:35][352938779830806][1 ms][DEBUG] START check_scloud [2025-09-07 08:01:35][352938779830806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:01:35][352938779830806][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 17569 7035 24039780 160688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:01:35][352938779830806][323 ms][DEBUG] targetPkg: running [2025-09-07 08:01:35][352938779830806][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 08:01:35][352938779830806][323 ms][DEBUG] START check_boot_completed [2025-09-07 08:01:35][352938779830806][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:01:35][352938779830806][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:01:35][352938779830806][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:01:35][352938779830806][432 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 08:01:35][352938779830806][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:01:35][352938779830806][432 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:01:35][352938779830806][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938779830806\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6866\"}'\'' -e'"" [2025-09-07 08:01:35][352938779830806][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:01:35][352938779830806][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938779830806\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6866\"}'\'' -e'"" [2025-09-07 08:01:40][352938779830806][5150 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be226100-0705-49d4-b77a-45307698bdc3","id":"QR_be226100-0705-49d4-b77a-45307698bdc3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:01:40][352938779830806][5306 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-07 08:01:40][352938779830806][5306 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-07 08:01:40][352938779830806][5306 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:23:03][353285383357654][1 ms][INFO] === Request start === [2025-09-07 08:23:03][353285383357654][1 ms][DEBUG] START check_scloud [2025-09-07 08:23:03][353285383357654][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:23:04][353285383357654][360 ms][DEBUG] SU: done in 359 ms; outu0_a118 17569 7035 24089736 159012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:23:04][353285383357654][360 ms][DEBUG] targetPkg: running [2025-09-07 08:23:04][353285383357654][360 ms][DEBUG] END check_scloud in 359 ms [2025-09-07 08:23:04][353285383357654][360 ms][DEBUG] START check_boot_completed [2025-09-07 08:23:04][353285383357654][360 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:23:04][353285383357654][391 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:23:04][353285383357654][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:23:04][353285383357654][438 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:23:04][353285383357654][438 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:23:04][353285383357654][438 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:23:04][353285383357654][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285383357654\",\"model\":\"SM-F721N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8141\"}'\'' -e'"" [2025-09-07 08:23:04][353285383357654][438 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:23:04][353285383357654][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285383357654\",\"model\":\"SM-F721N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8141\"}'\'' -e'"" [2025-09-07 08:23:09][353285383357654][5609 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1a8d889-8955-4036-8db2-cecfdab71909","id":"QR_b1a8d889-8955-4036-8db2-cecfdab71909","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:23:09][353285383357654][5765 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-07 08:23:09][353285383357654][5765 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-07 08:23:09][353285383357654][5765 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:23:12][353285383357654][0 ms][INFO] === Request start === [2025-09-07 08:23:12][353285383357654][1 ms][DEBUG] START check_scloud [2025-09-07 08:23:12][353285383357654][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:23:12][353285383357654][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 17569 7035 24233372 165052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:23:12][353285383357654][280 ms][DEBUG] targetPkg: running [2025-09-07 08:23:12][353285383357654][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-07 08:23:12][353285383357654][280 ms][DEBUG] START check_boot_completed [2025-09-07 08:23:12][353285383357654][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:23:12][353285383357654][326 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:23:12][353285383357654][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:23:12][353285383357654][389 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:23:12][353285383357654][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:23:12][353285383357654][389 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:23:12][353285383357654][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285383357654\",\"model\":\"SM-F721N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8945\"}'\'' -e'"" [2025-09-07 08:23:12][353285383357654][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:23:12][353285383357654][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285383357654\",\"model\":\"SM-F721N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8945\"}'\'' -e'"" [2025-09-07 08:23:17][353285383357654][5669 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_122fd8c8-7e13-4004-9696-5324d395d490","id":"QR_122fd8c8-7e13-4004-9696-5324d395d490","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:23:17][353285383357654][5825 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-07 08:23:17][353285383357654][5825 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-07 08:23:17][353285383357654][5825 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:24:03][353722580864553][0 ms][INFO] === Request start === [2025-09-07 08:24:03][353722580864553][1 ms][DEBUG] START check_scloud [2025-09-07 08:24:03][353722580864553][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:24:03][353722580864553][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 17569 7035 24373852 163120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:24:03][353722580864553][268 ms][DEBUG] targetPkg: running [2025-09-07 08:24:03][353722580864553][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-07 08:24:03][353722580864553][268 ms][DEBUG] START check_boot_completed [2025-09-07 08:24:03][353722580864553][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:24:03][353722580864553][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:24:03][353722580864553][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:24:03][353722580864553][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:24:03][353722580864553][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:24:03][353722580864553][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:24:03][353722580864553][549 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1225\nsuccessfulTxPacketsPerSecond: 0.26247416789043865\nretriedTxPackets: 212\nretriedTxPacketsPerSecond: 0.04319195167817345\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1247\nsuccessfulRxPacketsPerSecond: 0.24586187878344884\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:24:03][353722580864553][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:24:05][353722580864553][2330 ms][DEBUG] SU: done in 1780 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.513/299.513/299.513/0.000 ms\n [2025-09-07 08:24:05][353722580864553][2330 ms][DEBUG] check_internet: online [2025-09-07 08:24:05][353722580864553][2330 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:24:05][353722580864553][2330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722580864553\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-09-07 08:24:05][353722580864553][2330 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:24:05][353722580864553][2330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722580864553\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-09-07 08:24:09][353722580864553][6188 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80147f8c-5344-4dbe-9da5-1d49edacf442","id":"QR_80147f8c-5344-4dbe-9da5-1d49edacf442","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:24:09][353722580864553][6344 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-09-07 08:24:09][353722580864553][6344 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-07 08:24:09][353722580864553][6344 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:24:12][353722580864553][0 ms][INFO] === Request start === [2025-09-07 08:24:12][353722580864553][1 ms][DEBUG] START check_scloud [2025-09-07 08:24:12][353722580864553][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:24:12][353722580864553][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 17569 7035 24502116 174292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:24:12][353722580864553][327 ms][DEBUG] targetPkg: running [2025-09-07 08:24:12][353722580864553][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-07 08:24:12][353722580864553][327 ms][DEBUG] START check_boot_completed [2025-09-07 08:24:12][353722580864553][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:24:12][353722580864553][357 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 08:24:12][353722580864553][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:24:12][353722580864553][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:24:12][353722580864553][404 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 08:24:12][353722580864553][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:24:12][353722580864553][513 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1225\nsuccessfulTxPacketsPerSecond: 0.26247416789043865\nretriedTxPackets: 212\nretriedTxPacketsPerSecond: 0.04319195167817345\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1247\nsuccessfulRxPacketsPerSecond: 0.24586187878344884\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:24:12][353722580864553][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:24:12][353722580864553][951 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.541/333.541/333.541/0.000 ms\n [2025-09-07 08:24:12][353722580864553][951 ms][DEBUG] check_internet: online [2025-09-07 08:24:12][353722580864553][951 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:24:12][353722580864553][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722580864553\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5272\"}'\'' -e'"" [2025-09-07 08:24:12][353722580864553][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:24:12][353722580864553][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722580864553\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5272\"}'\'' -e'"" [2025-09-07 08:24:18][353722580864553][6199 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d426e2c9-8579-48ca-aaa9-2728cfde0732","id":"QR_d426e2c9-8579-48ca-aaa9-2728cfde0732","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:24:18][353722580864553][6355 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-07 08:24:18][353722580864553][6355 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-07 08:24:18][353722580864553][6355 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:25:03][352682500423438][0 ms][INFO] === Request start === [2025-09-07 08:25:03][352682500423438][1 ms][DEBUG] START check_scloud [2025-09-07 08:25:03][352682500423438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:25:04][352682500423438][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 17569 7035 24628068 167468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:25:04][352682500423438][272 ms][DEBUG] targetPkg: running [2025-09-07 08:25:04][352682500423438][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-07 08:25:04][352682500423438][272 ms][DEBUG] START check_boot_completed [2025-09-07 08:25:04][352682500423438][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:25:04][352682500423438][317 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 08:25:04][352682500423438][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:25:04][352682500423438][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:25:04][352682500423438][364 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 08:25:04][352682500423438][364 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:25:04][352682500423438][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500423438\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1152\"}'\'' -e'"" [2025-09-07 08:25:04][352682500423438][364 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:25:04][352682500423438][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500423438\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1152\"}'\'' -e'"" [2025-09-07 08:25:08][352682500423438][5003 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a35cf56-dc7d-4ed4-b5ce-f9ff8dccad33","id":"QR_9a35cf56-dc7d-4ed4-b5ce-f9ff8dccad33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:25:09][352682500423438][5160 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-07 08:25:09][352682500423438][5160 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-07 08:25:09][352682500423438][5160 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:25:11][352682500423438][1 ms][INFO] === Request start === [2025-09-07 08:25:11][352682500423438][1 ms][DEBUG] START check_scloud [2025-09-07 08:25:11][352682500423438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:25:11][352682500423438][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 17569 7035 24789104 179316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:25:11][352682500423438][312 ms][DEBUG] targetPkg: running [2025-09-07 08:25:11][352682500423438][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 08:25:11][352682500423438][312 ms][DEBUG] START check_boot_completed [2025-09-07 08:25:11][352682500423438][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:25:11][352682500423438][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:25:11][352682500423438][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:25:11][352682500423438][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:25:11][352682500423438][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:25:11][352682500423438][405 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:25:11][352682500423438][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500423438\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3553\"}'\'' -e'"" [2025-09-07 08:25:11][352682500423438][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:25:11][352682500423438][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500423438\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3553\"}'\'' -e'"" [2025-09-07 08:25:16][352682500423438][5154 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fa432aa-135a-4aad-8f72-4bd89a259cdb","id":"QR_8fa432aa-135a-4aad-8f72-4bd89a259cdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:25:16][352682500423438][5310 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-07 08:25:16][352682500423438][5310 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-07 08:25:16][352682500423438][5310 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:29:03][353628425820306][1 ms][INFO] === Request start === [2025-09-07 08:29:03][353628425820306][1 ms][DEBUG] START check_scloud [2025-09-07 08:29:03][353628425820306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:29:03][353628425820306][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 17569 7035 24925488 190496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:29:03][353628425820306][297 ms][DEBUG] targetPkg: running [2025-09-07 08:29:03][353628425820306][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 08:29:03][353628425820306][297 ms][DEBUG] START check_boot_completed [2025-09-07 08:29:03][353628425820306][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:29:04][353628425820306][328 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 08:29:04][353628425820306][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:29:04][353628425820306][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:29:04][353628425820306][375 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 08:29:04][353628425820306][375 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:29:04][353628425820306][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628425820306\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2323\"}'\'' -e'"" [2025-09-07 08:29:04][353628425820306][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:29:04][353628425820306][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628425820306\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2323\"}'\'' -e'"" [2025-09-07 08:29:08][353628425820306][4702 ms][DEBUG] proc_open done in 4327 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 08:29:08][353628425820306][4702 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-07 08:29:08][353628425820306][4702 ms][WARN] Detected error: Process with pid 17569 either refused to load frida-agent, or terminated during injectionProcess with pid 17569 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 08:29:08][353628425820306][4702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 08:29:08][353628425820306][4969 ms][DEBUG] SU: done in 267 ms; outsystem 7231 7035 12496784 256980 ep_poll 0 S system_server\n [2025-09-07 08:29:08][353628425820306][4969 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 08:29:08][353628425820306][5108 ms][DEBUG] SU: done in 139 ms; out [2025-09-07 08:29:08][353628425820306][5108 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 08:29:08][353628425820306][5108 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 08:29:08][353628425820306][5264 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 08:29:08][353628425820306][5264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 08:29:09][353628425820306][5514 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 08:29:11][353628425820306][7529 ms][DEBUG] START check_boot_completed [2025-09-07 08:29:11][353628425820306][7529 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:29:11][353628425820306][7576 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:29:11][353628425820306][7576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:29:11][353628425820306][7623 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:29:11][353628425820306][7623 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 08:29:14][353628425820306][10638 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 08:29:14][353628425820306][10638 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628425820306\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2323\"}'\'' -e'"" [2025-09-07 08:29:18][353628425820306][14481 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ac71a95-11d8-45b5-a28e-0613957f7fb4","id":"QR_0ac71a95-11d8-45b5-a28e-0613957f7fb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:29:18][353628425820306][14637 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-07 08:29:18][353628425820306][14637 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-09-07 08:29:18][353628425820306][14637 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:29:20][353628425820306][0 ms][INFO] === Request start === [2025-09-07 08:29:20][353628425820306][1 ms][DEBUG] START check_scloud [2025-09-07 08:29:20][353628425820306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:29:20][353628425820306][237 ms][DEBUG] SU: done in 236 ms; outu0_a118 19514 7035 23662368 123780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:29:20][353628425820306][237 ms][DEBUG] targetPkg: running [2025-09-07 08:29:20][353628425820306][237 ms][DEBUG] END check_scloud in 237 ms [2025-09-07 08:29:20][353628425820306][237 ms][DEBUG] START check_boot_completed [2025-09-07 08:29:20][353628425820306][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:29:20][353628425820306][284 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:29:20][353628425820306][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:29:20][353628425820306][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:29:20][353628425820306][331 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:29:20][353628425820306][331 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:29:20][353628425820306][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628425820306\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1530\"}'\'' -e'"" [2025-09-07 08:29:20][353628425820306][331 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:29:20][353628425820306][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628425820306\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1530\"}'\'' -e'"" [2025-09-07 08:29:25][353628425820306][5236 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d37d3002-5ca2-4314-b7b0-169afa2c1d45","id":"QR_d37d3002-5ca2-4314-b7b0-169afa2c1d45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:29:25][353628425820306][5392 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-07 08:29:25][353628425820306][5392 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-07 08:29:25][353628425820306][5392 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:29:30][350536254447195][0 ms][INFO] === Request start === [2025-09-07 08:29:30][350536254447195][1 ms][DEBUG] START check_scloud [2025-09-07 08:29:30][350536254447195][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:29:30][350536254447195][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 19514 7035 23853108 137168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:29:30][350536254447195][261 ms][DEBUG] targetPkg: running [2025-09-07 08:29:30][350536254447195][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-07 08:29:30][350536254447195][261 ms][DEBUG] START check_boot_completed [2025-09-07 08:29:30][350536254447195][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:29:30][350536254447195][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:29:30][350536254447195][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:29:30][350536254447195][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:29:30][350536254447195][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:29:30][350536254447195][354 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:29:30][350536254447195][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536254447195\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7267\"}'\'' -e'"" [2025-09-07 08:29:30][350536254447195][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:29:30][350536254447195][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536254447195\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7267\"}'\'' -e'"" [2025-09-07 08:29:33][350536254447195][3666 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee555e5a-5e84-4fd4-a62e-5293354d143c","id":"QR_ee555e5a-5e84-4fd4-a62e-5293354d143c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:29:34][350536254447195][3822 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-07 08:29:34][350536254447195][3822 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-07 08:29:34][350536254447195][3822 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:29:36][350536254447195][0 ms][INFO] === Request start === [2025-09-07 08:29:36][350536254447195][0 ms][DEBUG] START check_scloud [2025-09-07 08:29:36][350536254447195][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:29:36][350536254447195][327 ms][DEBUG] SU: done in 327 ms; outu0_a118 19514 7035 23962776 148972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:29:36][350536254447195][327 ms][DEBUG] targetPkg: running [2025-09-07 08:29:36][350536254447195][327 ms][DEBUG] END check_scloud in 327 ms [2025-09-07 08:29:36][350536254447195][327 ms][DEBUG] START check_boot_completed [2025-09-07 08:29:36][350536254447195][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:29:36][350536254447195][359 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:29:36][350536254447195][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:29:36][350536254447195][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:29:36][350536254447195][405 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:29:36][350536254447195][405 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:29:36][350536254447195][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536254447195\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1290\"}'\'' -e'"" [2025-09-07 08:29:36][350536254447195][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:29:36][350536254447195][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536254447195\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1290\"}'\'' -e'"" [2025-09-07 08:29:41][350536254447195][5014 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00358012-afcb-488b-a89b-e0e281ed1c56","id":"QR_00358012-afcb-488b-a89b-e0e281ed1c56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:29:41][350536254447195][5170 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-07 08:29:41][350536254447195][5170 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-07 08:29:41][350536254447195][5170 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:30:04][351240640668783][0 ms][INFO] === Request start === [2025-09-07 08:30:04][351240640668783][1 ms][DEBUG] START check_scloud [2025-09-07 08:30:04][351240640668783][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:30:04][351240640668783][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 19514 7035 23971716 160504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:30:04][351240640668783][296 ms][DEBUG] targetPkg: running [2025-09-07 08:30:04][351240640668783][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 08:30:04][351240640668783][296 ms][DEBUG] START check_boot_completed [2025-09-07 08:30:04][351240640668783][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:30:04][351240640668783][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:30:04][351240640668783][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:30:04][351240640668783][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:30:04][351240640668783][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:30:04][351240640668783][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:30:04][351240640668783][483 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1356\nsuccessfulTxPacketsPerSecond: 0.9741225461035098\nretriedTxPackets: 247\nretriedTxPacketsPerSecond: 0.260261748958953\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1363\nsuccessfulRxPacketsPerSecond: 0.8625817965496728\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:30:04][351240640668783][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:30:06][351240640668783][1858 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.505/305.505/305.505/0.000 ms\n [2025-09-07 08:30:06][351240640668783][1858 ms][DEBUG] check_internet: online [2025-09-07 08:30:06][351240640668783][1858 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:30:06][351240640668783][1858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640668783\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8796\"}'\'' -e'"" [2025-09-07 08:30:06][351240640668783][1858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:30:06][351240640668783][1858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640668783\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8796\"}'\'' -e'"" [2025-09-07 08:30:09][351240640668783][5482 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d107632b-e0b8-4a6a-a695-126275507c68","id":"QR_d107632b-e0b8-4a6a-a695-126275507c68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:30:09][351240640668783][5638 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-07 08:30:09][351240640668783][5638 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-07 08:30:09][351240640668783][5638 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:30:12][351240640668783][0 ms][INFO] === Request start === [2025-09-07 08:30:12][351240640668783][1 ms][DEBUG] START check_scloud [2025-09-07 08:30:12][351240640668783][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:30:12][351240640668783][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 19514 7035 24154308 171072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:30:12][351240640668783][323 ms][DEBUG] targetPkg: running [2025-09-07 08:30:12][351240640668783][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 08:30:12][351240640668783][323 ms][DEBUG] START check_boot_completed [2025-09-07 08:30:12][351240640668783][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:30:12][351240640668783][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:30:12][351240640668783][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:30:12][351240640668783][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:30:12][351240640668783][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:30:12][351240640668783][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:30:12][351240640668783][541 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1356\nsuccessfulTxPacketsPerSecond: 0.9741225461035098\nretriedTxPackets: 247\nretriedTxPacketsPerSecond: 0.260261748958953\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1363\nsuccessfulRxPacketsPerSecond: 0.8625817965496728\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:30:12][351240640668783][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:30:13][351240640668783][978 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.714/335.714/335.714/0.000 ms\n [2025-09-07 08:30:13][351240640668783][978 ms][DEBUG] check_internet: online [2025-09-07 08:30:13][351240640668783][978 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:30:13][351240640668783][978 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640668783\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6487\"}'\'' -e'"" [2025-09-07 08:30:13][351240640668783][979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:30:13][351240640668783][979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640668783\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6487\"}'\'' -e'"" [2025-09-07 08:30:18][351240640668783][5977 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3298cc43-7e2b-4854-8a44-a8d4ba2cce75","id":"QR_3298cc43-7e2b-4854-8a44-a8d4ba2cce75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:30:18][351240640668783][6133 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-07 08:30:18][351240640668783][6134 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-07 08:30:18][351240640668783][6134 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:32:03][350013900698449][1 ms][INFO] === Request start === [2025-09-07 08:32:03][350013900698449][1 ms][DEBUG] START check_scloud [2025-09-07 08:32:03][350013900698449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:32:04][350013900698449][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19514 7035 24272148 182956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:32:04][350013900698449][311 ms][DEBUG] targetPkg: running [2025-09-07 08:32:04][350013900698449][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 08:32:04][350013900698449][311 ms][DEBUG] START check_boot_completed [2025-09-07 08:32:04][350013900698449][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:32:04][350013900698449][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:32:04][350013900698449][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:32:04][350013900698449][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:32:04][350013900698449][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:32:04][350013900698449][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:32:04][350013900698449][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1539\nsuccessfulTxPacketsPerSecond: 0.5957981579093019\nretriedTxPackets: 298\nretriedTxPacketsPerSecond: 0.16604210958128088\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1522\nsuccessfulRxPacketsPerSecond: 0.5176606945769344\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:32:04][350013900698449][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:32:04][350013900698449][951 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.118/319.118/319.118/0.000 ms\n [2025-09-07 08:32:04][350013900698449][951 ms][DEBUG] check_internet: online [2025-09-07 08:32:04][350013900698449][951 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:32:04][350013900698449][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900698449\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9748\"}'\'' -e'"" [2025-09-07 08:32:04][350013900698449][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:32:04][350013900698449][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900698449\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9748\"}'\'' -e'"" [2025-09-07 08:32:09][350013900698449][5341 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f675f3de-002a-41b4-82b1-eff859b178a7","id":"QR_f675f3de-002a-41b4-82b1-eff859b178a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:32:09][350013900698449][5497 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-09-07 08:32:09][350013900698449][5497 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-09-07 08:32:09][350013900698449][5497 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:32:11][350013900698449][0 ms][INFO] === Request start === [2025-09-07 08:32:11][350013900698449][1 ms][DEBUG] START check_scloud [2025-09-07 08:32:11][350013900698449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:32:12][350013900698449][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 19514 7035 24427036 194080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:32:12][350013900698449][298 ms][DEBUG] targetPkg: running [2025-09-07 08:32:12][350013900698449][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 08:32:12][350013900698449][298 ms][DEBUG] START check_boot_completed [2025-09-07 08:32:12][350013900698449][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:32:12][350013900698449][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:32:12][350013900698449][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:32:12][350013900698449][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:32:12][350013900698449][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:32:12][350013900698449][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:32:12][350013900698449][486 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1539\nsuccessfulTxPacketsPerSecond: 0.5957981579093019\nretriedTxPackets: 298\nretriedTxPacketsPerSecond: 0.16604210958128088\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1522\nsuccessfulRxPacketsPerSecond: 0.5176606945769344\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:32:12][350013900698449][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:32:12][350013900698449][813 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.059/227.059/227.059/0.000 ms\n [2025-09-07 08:32:12][350013900698449][813 ms][DEBUG] check_internet: online [2025-09-07 08:32:12][350013900698449][813 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:32:12][350013900698449][813 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900698449\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4652\"}'\'' -e'"" [2025-09-07 08:32:12][350013900698449][813 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:32:12][350013900698449][813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900698449\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4652\"}'\'' -e'"" [2025-09-07 08:32:17][350013900698449][5999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54aab046-f132-4d23-b44f-69dfb29152a3","id":"QR_54aab046-f132-4d23-b44f-69dfb29152a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:32:17][350013900698449][6155 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-07 08:32:17][350013900698449][6155 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-07 08:32:17][350013900698449][6155 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:37:03][354626222577540][1 ms][INFO] === Request start === [2025-09-07 08:37:03][354626222577540][1 ms][DEBUG] START check_scloud [2025-09-07 08:37:03][354626222577540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:37:03][354626222577540][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 19514 7035 24534748 205888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:37:03][354626222577540][324 ms][DEBUG] targetPkg: running [2025-09-07 08:37:03][354626222577540][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 08:37:03][354626222577540][324 ms][DEBUG] START check_boot_completed [2025-09-07 08:37:03][354626222577540][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:37:03][354626222577540][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:37:03][354626222577540][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:37:03][354626222577540][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:37:03][354626222577540][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:37:03][354626222577540][417 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:37:03][354626222577540][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222577540\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9826\"}'\'' -e'"" [2025-09-07 08:37:03][354626222577540][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:37:03][354626222577540][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222577540\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9826\"}'\'' -e'"" [2025-09-07 08:37:08][354626222577540][5104 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d6ff903-34ad-4366-8641-9538b1aebea2","id":"QR_0d6ff903-34ad-4366-8641-9538b1aebea2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:37:08][354626222577540][5260 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-07 08:37:08][354626222577540][5260 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-09-07 08:37:08][354626222577540][5260 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:37:11][354626222577540][0 ms][INFO] === Request start === [2025-09-07 08:37:11][354626222577540][1 ms][DEBUG] START check_scloud [2025-09-07 08:37:11][354626222577540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:37:11][354626222577540][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 19514 7035 24699876 213952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:37:11][354626222577540][270 ms][DEBUG] targetPkg: running [2025-09-07 08:37:11][354626222577540][270 ms][DEBUG] END check_scloud in 270 ms [2025-09-07 08:37:11][354626222577540][270 ms][DEBUG] START check_boot_completed [2025-09-07 08:37:11][354626222577540][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:37:11][354626222577540][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:37:11][354626222577540][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:37:11][354626222577540][380 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:37:11][354626222577540][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:37:11][354626222577540][380 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:37:11][354626222577540][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222577540\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4280\"}'\'' -e'"" [2025-09-07 08:37:11][354626222577540][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:37:11][354626222577540][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626222577540\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4280\"}'\'' -e'"" [2025-09-07 08:37:16][354626222577540][5722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c100033e-d33c-4311-9070-be03aca4d164","id":"QR_c100033e-d33c-4311-9070-be03aca4d164","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:37:16][354626222577540][5878 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-07 08:37:16][354626222577540][5878 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-07 08:37:16][354626222577540][5878 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:40:03][353912110648754][1 ms][INFO] === Request start === [2025-09-07 08:40:03][353912110648754][1 ms][DEBUG] START check_scloud [2025-09-07 08:40:03][353912110648754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:40:03][353912110648754][322 ms][DEBUG] SU: done in 320 ms; outu0_a118 19514 7035 24828068 222076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:40:03][353912110648754][322 ms][DEBUG] targetPkg: running [2025-09-07 08:40:03][353912110648754][322 ms][DEBUG] END check_scloud in 320 ms [2025-09-07 08:40:03][353912110648754][322 ms][DEBUG] START check_boot_completed [2025-09-07 08:40:03][353912110648754][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:40:03][353912110648754][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:40:03][353912110648754][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:40:03][353912110648754][402 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 08:40:03][353912110648754][402 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 08:40:03][353912110648754][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:40:04][353912110648754][509 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1664\nsuccessfulTxPacketsPerSecond: 0.23626698168930893\nretriedTxPackets: 342\nretriedTxPacketsPerSecond: 0.09516308984708276\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1621\nsuccessfulRxPacketsPerSecond: 0.1837632079805736\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:40:04][353912110648754][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:40:05][353912110648754][1931 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.094/300.094/300.094/0.000 ms\n [2025-09-07 08:40:05][353912110648754][1931 ms][DEBUG] check_internet: online [2025-09-07 08:40:05][353912110648754][1931 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:40:05][353912110648754][1931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353912110648754\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"OPS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3958\"}'\'' -e'"" [2025-09-07 08:40:05][353912110648754][1931 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:40:05][353912110648754][1931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353912110648754\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"OPS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3958\"}'\'' -e'"" [2025-09-07 08:40:09][353912110648754][5726 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d08f492-da61-4cb3-be82-76498276afde","id":"QR_7d08f492-da61-4cb3-be82-76498276afde","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:40:09][353912110648754][5883 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-07 08:40:09][353912110648754][5883 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-07 08:40:09][353912110648754][5883 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:40:11][353912110648754][0 ms][INFO] === Request start === [2025-09-07 08:40:11][353912110648754][1 ms][DEBUG] START check_scloud [2025-09-07 08:40:11][353912110648754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:40:12][353912110648754][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 19514 7035 24999340 229176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:40:12][353912110648754][313 ms][DEBUG] targetPkg: running [2025-09-07 08:40:12][353912110648754][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 08:40:12][353912110648754][313 ms][DEBUG] START check_boot_completed [2025-09-07 08:40:12][353912110648754][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:40:12][353912110648754][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:40:12][353912110648754][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:40:12][353912110648754][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:40:12][353912110648754][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:40:12][353912110648754][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:40:12][353912110648754][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1664\nsuccessfulTxPacketsPerSecond: 0.23626698168930893\nretriedTxPackets: 342\nretriedTxPacketsPerSecond: 0.09516308984708276\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1621\nsuccessfulRxPacketsPerSecond: 0.1837632079805736\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:40:12][353912110648754][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:40:12][353912110648754][844 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.049/226.049/226.049/0.000 ms\n [2025-09-07 08:40:12][353912110648754][844 ms][DEBUG] check_internet: online [2025-09-07 08:40:12][353912110648754][845 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:40:12][353912110648754][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353912110648754\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"OPS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8650\"}'\'' -e'"" [2025-09-07 08:40:12][353912110648754][845 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:40:12][353912110648754][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353912110648754\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"OPS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8650\"}'\'' -e'"" [2025-09-07 08:40:16][353912110648754][4875 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 08:40:16][353912110648754][4875 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-07 08:40:16][353912110648754][4875 ms][WARN] Detected error: Process with pid 19514 either refused to load frida-agent, or terminated during injectionProcess with pid 19514 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 08:40:16][353912110648754][4875 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 08:40:16][353912110648754][5171 ms][DEBUG] SU: done in 296 ms; outsystem 7231 7035 12546672 223704 ep_poll 0 S system_server\n [2025-09-07 08:40:16][353912110648754][5172 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 08:40:17][353912110648754][5328 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 08:40:17][353912110648754][5328 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 08:40:17][353912110648754][5328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 08:40:17][353912110648754][5486 ms][DEBUG] SU: done in 158 ms; out [2025-09-07 08:40:17][353912110648754][5486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 08:40:17][353912110648754][5671 ms][DEBUG] SU: done in 185 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 08:40:19][353912110648754][7686 ms][DEBUG] START check_boot_completed [2025-09-07 08:40:19][353912110648754][7686 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:40:19][353912110648754][7733 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:40:19][353912110648754][7733 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:40:19][353912110648754][7811 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 08:40:19][353912110648754][7812 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 08:40:22][353912110648754][10826 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 08:40:22][353912110648754][10826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353912110648754\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"OPS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8650\"}'\'' -e'"" [2025-09-07 08:40:27][353912110648754][16075 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bf52d19-a5e8-4e8f-8f46-bd45ed327f4d","id":"QR_9bf52d19-a5e8-4e8f-8f46-bd45ed327f4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:40:27][353912110648754][16231 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-09-07 08:40:27][353912110648754][16231 ms][DEBUG] END runCmdUntilRes#2 in 5405 ms [2025-09-07 08:40:27][353912110648754][16232 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:41:03][350013881646649][0 ms][INFO] === Request start === [2025-09-07 08:41:03][350013881646649][1 ms][DEBUG] START check_scloud [2025-09-07 08:41:03][350013881646649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:41:03][350013881646649][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 21837 7035 23558808 126876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:41:03][350013881646649][323 ms][DEBUG] targetPkg: running [2025-09-07 08:41:03][350013881646649][323 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 08:41:03][350013881646649][324 ms][DEBUG] START check_boot_completed [2025-09-07 08:41:03][350013881646649][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:41:03][350013881646649][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:41:03][350013881646649][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:41:03][350013881646649][433 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 08:41:03][350013881646649][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:41:03][350013881646649][433 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:41:03][350013881646649][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646649\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-09-07 08:41:03][350013881646649][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:41:03][350013881646649][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646649\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-09-07 08:41:07][350013881646649][3822 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac66384a-772a-4477-8240-8da1e23e0c39","id":"QR_ac66384a-772a-4477-8240-8da1e23e0c39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:41:07][350013881646649][3979 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-07 08:41:07][350013881646649][3979 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-07 08:41:07][350013881646649][3979 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:41:09][350013881646649][0 ms][INFO] === Request start === [2025-09-07 08:41:09][350013881646649][1 ms][DEBUG] START check_scloud [2025-09-07 08:41:09][350013881646649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:41:10][350013881646649][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 21837 7035 23717728 137976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:41:10][350013881646649][290 ms][DEBUG] targetPkg: running [2025-09-07 08:41:10][350013881646649][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-07 08:41:10][350013881646649][290 ms][DEBUG] START check_boot_completed [2025-09-07 08:41:10][350013881646649][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:41:10][350013881646649][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:41:10][350013881646649][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:41:10][350013881646649][400 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 08:41:10][350013881646649][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:41:10][350013881646649][400 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:41:10][350013881646649][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646649\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6567\"}'\'' -e'"" [2025-09-07 08:41:10][350013881646649][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:41:10][350013881646649][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646649\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6567\"}'\'' -e'"" [2025-09-07 08:41:14][350013881646649][5055 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_126472df-8582-4bac-b5e5-73d100b6f1f7","id":"QR_126472df-8582-4bac-b5e5-73d100b6f1f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:41:15][350013881646649][5211 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 08:41:15][350013881646649][5211 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 08:41:15][350013881646649][5211 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:42:03][355506802125820][0 ms][INFO] === Request start === [2025-09-07 08:42:03][355506802125820][1 ms][DEBUG] START check_scloud [2025-09-07 08:42:03][355506802125820][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:42:03][355506802125820][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 21837 7035 23810848 149228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:42:03][355506802125820][319 ms][DEBUG] targetPkg: running [2025-09-07 08:42:03][355506802125820][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 08:42:03][355506802125820][319 ms][DEBUG] START check_boot_completed [2025-09-07 08:42:03][355506802125820][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:42:03][355506802125820][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:42:03][355506802125820][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:42:03][355506802125820][414 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 08:42:03][355506802125820][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 08:42:03][355506802125820][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:42:04][355506802125820][537 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1664\nsuccessfulTxPacketsPerSecond: 0.23626698168930893\nretriedTxPackets: 342\nretriedTxPacketsPerSecond: 0.09516308984708276\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1621\nsuccessfulRxPacketsPerSecond: 0.1837632079805736\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:42:04][355506802125820][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:42:05][355506802125820][1976 ms][DEBUG] SU: done in 1439 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.708/300.708/300.708/0.000 ms\n [2025-09-07 08:42:05][355506802125820][1976 ms][DEBUG] check_internet: online [2025-09-07 08:42:05][355506802125820][1976 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:42:05][355506802125820][1976 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802125820\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3354\"}'\'' -e'"" [2025-09-07 08:42:05][355506802125820][1976 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:42:05][355506802125820][1977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802125820\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3354\"}'\'' -e'"" [2025-09-07 08:42:09][355506802125820][5989 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5137a1d-8e43-404a-ae90-1cf02ed6c1c7","id":"QR_d5137a1d-8e43-404a-ae90-1cf02ed6c1c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:42:09][355506802125820][6145 ms][DEBUG] proc_open done in 4168 ms; code=255; res.len=3343 [2025-09-07 08:42:09][355506802125820][6145 ms][DEBUG] END runCmdUntilRes#1 in 4169 ms [2025-09-07 08:42:09][355506802125820][6145 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:42:12][355506802125820][1 ms][INFO] === Request start === [2025-09-07 08:42:12][355506802125820][1 ms][DEBUG] START check_scloud [2025-09-07 08:42:12][355506802125820][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:42:12][355506802125820][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 21837 7035 23973992 160248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:42:12][355506802125820][277 ms][DEBUG] targetPkg: running [2025-09-07 08:42:12][355506802125820][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-07 08:42:12][355506802125820][277 ms][DEBUG] START check_boot_completed [2025-09-07 08:42:12][355506802125820][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:42:12][355506802125820][324 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:42:12][355506802125820][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:42:12][355506802125820][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:42:12][355506802125820][371 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:42:12][355506802125820][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:42:12][355506802125820][480 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1664\nsuccessfulTxPacketsPerSecond: 0.23626698168930893\nretriedTxPackets: 342\nretriedTxPacketsPerSecond: 0.09516308984708276\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1621\nsuccessfulRxPacketsPerSecond: 0.1837632079805736\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:42:12][355506802125820][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:42:13][355506802125820][919 ms][DEBUG] SU: done in 439 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.920/341.920/341.920/0.000 ms\n [2025-09-07 08:42:13][355506802125820][919 ms][DEBUG] check_internet: online [2025-09-07 08:42:13][355506802125820][919 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:42:13][355506802125820][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802125820\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9875\"}'\'' -e'"" [2025-09-07 08:42:13][355506802125820][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:42:13][355506802125820][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802125820\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9875\"}'\'' -e'"" [2025-09-07 08:42:18][355506802125820][6228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe3205dd-aab1-487a-9c9d-cd10fb12a3c2","id":"QR_fe3205dd-aab1-487a-9c9d-cd10fb12a3c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:42:18][355506802125820][6385 ms][DEBUG] proc_open done in 5465 ms; code=255; res.len=3343 [2025-09-07 08:42:18][355506802125820][6385 ms][DEBUG] END runCmdUntilRes#1 in 5465 ms [2025-09-07 08:42:18][355506802125820][6385 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:44:04][357224286226027][1 ms][INFO] === Request start === [2025-09-07 08:44:04][357224286226027][1 ms][DEBUG] START check_scloud [2025-09-07 08:44:04][357224286226027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:44:04][357224286226027][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 21837 7035 24098040 172720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:44:04][357224286226027][312 ms][DEBUG] targetPkg: running [2025-09-07 08:44:04][357224286226027][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 08:44:04][357224286226027][312 ms][DEBUG] START check_boot_completed [2025-09-07 08:44:04][357224286226027][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:44:04][357224286226027][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:44:04][357224286226027][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:44:04][357224286226027][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:44:04][357224286226027][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:44:04][357224286226027][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:44:04][357224286226027][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1844\nsuccessfulTxPacketsPerSecond: 0.5980165783484775\nretriedTxPackets: 397\nretriedTxPacketsPerSecond: 0.18272728782870148\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1779\nsuccessfulRxPacketsPerSecond: 0.524925663216997\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:44:04][357224286226027][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:44:05][357224286226027][952 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.269/330.269/330.269/0.000 ms\n [2025-09-07 08:44:05][357224286226027][952 ms][DEBUG] check_internet: online [2025-09-07 08:44:05][357224286226027][952 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:44:05][357224286226027][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357224286226027\",\"model\":\"SM-A415F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-09-07 08:44:05][357224286226027][953 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:44:05][357224286226027][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357224286226027\",\"model\":\"SM-A415F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-09-07 08:44:09][357224286226027][5685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8961374f-5d51-4f1c-8fef-04fe5ddf963b","id":"QR_8961374f-5d51-4f1c-8fef-04fe5ddf963b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:44:09][357224286226027][5841 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-07 08:44:09][357224286226027][5841 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-07 08:44:09][357224286226027][5841 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:44:12][357224286226027][0 ms][INFO] === Request start === [2025-09-07 08:44:12][357224286226027][1 ms][DEBUG] START check_scloud [2025-09-07 08:44:12][357224286226027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:44:12][357224286226027][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21837 7035 24222080 183468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:44:12][357224286226027][306 ms][DEBUG] targetPkg: running [2025-09-07 08:44:12][357224286226027][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 08:44:12][357224286226027][306 ms][DEBUG] START check_boot_completed [2025-09-07 08:44:12][357224286226027][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:44:12][357224286226027][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:44:12][357224286226027][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:44:12][357224286226027][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:44:12][357224286226027][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:44:12][357224286226027][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:44:12][357224286226027][524 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1844\nsuccessfulTxPacketsPerSecond: 0.5980165783484775\nretriedTxPackets: 397\nretriedTxPacketsPerSecond: 0.18272728782870148\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1779\nsuccessfulRxPacketsPerSecond: 0.524925663216997\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:44:12][357224286226027][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:44:13][357224286226027][962 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.003/302.003/302.003/0.000 ms\n [2025-09-07 08:44:13][357224286226027][962 ms][DEBUG] check_internet: online [2025-09-07 08:44:13][357224286226027][962 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:44:13][357224286226027][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357224286226027\",\"model\":\"SM-A415F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3766\"}'\'' -e'"" [2025-09-07 08:44:13][357224286226027][962 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:44:13][357224286226027][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357224286226027\",\"model\":\"SM-A415F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3766\"}'\'' -e'"" [2025-09-07 08:44:18][357224286226027][6320 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b66930cf-e2b0-4f82-8936-84167cf8bed9","id":"QR_b66930cf-e2b0-4f82-8936-84167cf8bed9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:44:18][357224286226027][6476 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 08:44:18][357224286226027][6476 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 08:44:18][357224286226027][6476 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:48:03][357962500241351][1 ms][INFO] === Request start === [2025-09-07 08:48:03][357962500241351][1 ms][DEBUG] START check_scloud [2025-09-07 08:48:03][357962500241351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:48:04][357962500241351][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 21837 7035 24346048 194908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:48:04][357962500241351][312 ms][DEBUG] targetPkg: running [2025-09-07 08:48:04][357962500241351][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 08:48:04][357962500241351][312 ms][DEBUG] START check_boot_completed [2025-09-07 08:48:04][357962500241351][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:48:04][357962500241351][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:48:04][357962500241351][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:48:04][357962500241351][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:48:04][357962500241351][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:48:04][357962500241351][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:48:04][357962500241351][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:48:04][357962500241351][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:48:05][357962500241351][1905 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.396/304.396/304.396/0.000 ms\n [2025-09-07 08:48:05][357962500241351][1905 ms][DEBUG] check_internet: online [2025-09-07 08:48:05][357962500241351][1905 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:48:05][357962500241351][1905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500241351\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8657\"}'\'' -e'"" [2025-09-07 08:48:05][357962500241351][1905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:48:05][357962500241351][1905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500241351\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8657\"}'\'' -e'"" [2025-09-07 08:48:09][357962500241351][5936 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3674bab5-a3cf-4de9-a1fa-028f3ac19612","id":"QR_3674bab5-a3cf-4de9-a1fa-028f3ac19612","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:48:10][357962500241351][6092 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-07 08:48:10][357962500241351][6092 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-09-07 08:48:10][357962500241351][6092 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:48:12][357962500241351][1 ms][INFO] === Request start === [2025-09-07 08:48:12][357962500241351][1 ms][DEBUG] START check_scloud [2025-09-07 08:48:12][357962500241351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:48:12][357962500241351][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21837 7035 24521416 206828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:48:12][357962500241351][305 ms][DEBUG] targetPkg: running [2025-09-07 08:48:12][357962500241351][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 08:48:12][357962500241351][305 ms][DEBUG] START check_boot_completed [2025-09-07 08:48:12][357962500241351][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:48:12][357962500241351][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:48:12][357962500241351][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:48:12][357962500241351][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:48:12][357962500241351][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:48:12][357962500241351][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:48:12][357962500241351][539 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:48:12][357962500241351][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:48:13][357962500241351][914 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.858/269.858/269.858/0.000 ms\n [2025-09-07 08:48:13][357962500241351][914 ms][DEBUG] check_internet: online [2025-09-07 08:48:13][357962500241351][914 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:48:13][357962500241351][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500241351\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5932\"}'\'' -e'"" [2025-09-07 08:48:13][357962500241351][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:48:13][357962500241351][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962500241351\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5932\"}'\'' -e'"" [2025-09-07 08:48:18][357962500241351][5960 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_625da402-7810-41cf-90b8-d439bf304738","id":"QR_625da402-7810-41cf-90b8-d439bf304738","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:48:18][357962500241351][6116 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 08:48:18][357962500241351][6116 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 08:48:18][357962500241351][6116 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:50:03][357026892460860][0 ms][INFO] === Request start === [2025-09-07 08:50:03][357026892460860][1 ms][DEBUG] START check_scloud [2025-09-07 08:50:03][357026892460860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:50:03][357026892460860][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 21837 7035 24655752 217492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:50:03][357026892460860][295 ms][DEBUG] targetPkg: running [2025-09-07 08:50:03][357026892460860][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-07 08:50:03][357026892460860][295 ms][DEBUG] START check_boot_completed [2025-09-07 08:50:03][357026892460860][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:50:04][357026892460860][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:50:04][357026892460860][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:50:04][357026892460860][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:50:04][357026892460860][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:50:04][357026892460860][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:50:04][357026892460860][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:50:04][357026892460860][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:50:04][357026892460860][998 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.657/315.657/315.657/0.000 ms\n [2025-09-07 08:50:04][357026892460860][998 ms][DEBUG] check_internet: online [2025-09-07 08:50:04][357026892460860][998 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:50:04][357026892460860][998 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026892460860\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1373\"}'\'' -e'"" [2025-09-07 08:50:04][357026892460860][998 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:50:04][357026892460860][998 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026892460860\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1373\"}'\'' -e'"" [2025-09-07 08:50:09][357026892460860][6028 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e953a6a-f291-4e96-ab87-78e2a8fbb856","id":"QR_0e953a6a-f291-4e96-ab87-78e2a8fbb856","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:50:09][357026892460860][6184 ms][DEBUG] proc_open done in 5185 ms; code=255; res.len=3343 [2025-09-07 08:50:09][357026892460860][6184 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 08:50:09][357026892460860][6184 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:50:12][357026892460860][1 ms][INFO] === Request start === [2025-09-07 08:50:12][357026892460860][1 ms][DEBUG] START check_scloud [2025-09-07 08:50:12][357026892460860][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:50:12][357026892460860][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 21837 7035 24796176 229280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:50:12][357026892460860][317 ms][DEBUG] targetPkg: running [2025-09-07 08:50:12][357026892460860][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 08:50:12][357026892460860][317 ms][DEBUG] START check_boot_completed [2025-09-07 08:50:12][357026892460860][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:50:12][357026892460860][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:50:12][357026892460860][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:50:12][357026892460860][426 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 08:50:12][357026892460860][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:50:12][357026892460860][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:50:12][357026892460860][551 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:50:12][357026892460860][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:50:13][357026892460860][989 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.729/309.729/309.729/0.000 ms\n [2025-09-07 08:50:13][357026892460860][989 ms][DEBUG] check_internet: online [2025-09-07 08:50:13][357026892460860][989 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:50:13][357026892460860][989 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026892460860\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9782\"}'\'' -e'"" [2025-09-07 08:50:13][357026892460860][989 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:50:13][357026892460860][989 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026892460860\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9782\"}'\'' -e'"" [2025-09-07 08:50:18][357026892460860][6237 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60fe1eda-b7cf-4c46-8c18-5523c6bf9a04","id":"QR_60fe1eda-b7cf-4c46-8c18-5523c6bf9a04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:50:18][357026892460860][6393 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-07 08:50:18][357026892460860][6393 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-07 08:50:18][357026892460860][6394 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:50:22][353628423654202][0 ms][INFO] === Request start === [2025-09-07 08:50:22][353628423654202][1 ms][DEBUG] START check_scloud [2025-09-07 08:50:22][353628423654202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:50:22][353628423654202][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 21837 7035 24932632 241084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:50:22][353628423654202][252 ms][DEBUG] targetPkg: running [2025-09-07 08:50:22][353628423654202][252 ms][DEBUG] END check_scloud in 252 ms [2025-09-07 08:50:22][353628423654202][252 ms][DEBUG] START check_boot_completed [2025-09-07 08:50:22][353628423654202][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:50:23][353628423654202][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:50:23][353628423654202][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:50:23][353628423654202][347 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 08:50:23][353628423654202][347 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 08:50:23][353628423654202][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:50:23][353628423654202][502 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:50:23][353628423654202][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:50:23][353628423654202][861 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.667/252.667/252.667/0.000 ms\n [2025-09-07 08:50:23][353628423654202][861 ms][DEBUG] check_internet: online [2025-09-07 08:50:23][353628423654202][861 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:50:23][353628423654202][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423654202\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6209\"}'\'' -e'"" [2025-09-07 08:50:23][353628423654202][861 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:50:23][353628423654202][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423654202\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6209\"}'\'' -e'"" [2025-09-07 08:50:27][353628423654202][4720 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 08:50:27][353628423654202][4720 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-07 08:50:27][353628423654202][4720 ms][WARN] Detected error: Process with pid 21837 either refused to load frida-agent, or terminated during injectionProcess with pid 21837 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 08:50:27][353628423654202][4720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 08:50:27][353628423654202][4970 ms][DEBUG] SU: done in 250 ms; outsystem 7231 7035 12564108 186488 ep_poll 0 S system_server\n [2025-09-07 08:50:27][353628423654202][4970 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 08:50:27][353628423654202][5110 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 08:50:27][353628423654202][5110 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 08:50:27][353628423654202][5110 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 08:50:27][353628423654202][5235 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 08:50:27][353628423654202][5235 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 08:50:28][353628423654202][5407 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 08:50:30][353628423654202][7422 ms][DEBUG] START check_boot_completed [2025-09-07 08:50:30][353628423654202][7422 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:50:30][353628423654202][7469 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:50:30][353628423654202][7469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:50:30][353628423654202][7516 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:50:30][353628423654202][7516 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 08:50:33][353628423654202][10531 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 08:50:33][353628423654202][10531 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423654202\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6209\"}'\'' -e'"" [2025-09-07 08:50:36][353628423654202][13889 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_053c37f7-5d39-4680-acec-426e17bc63fc","id":"QR_053c37f7-5d39-4680-acec-426e17bc63fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:50:36][353628423654202][14046 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-07 08:50:36][353628423654202][14046 ms][DEBUG] END runCmdUntilRes#2 in 3515 ms [2025-09-07 08:50:36][353628423654202][14046 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:50:39][353628423654202][0 ms][INFO] === Request start === [2025-09-07 08:50:39][353628423654202][1 ms][DEBUG] START check_scloud [2025-09-07 08:50:39][353628423654202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:50:39][353628423654202][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 23502 7035 23613856 124668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:50:39][353628423654202][259 ms][DEBUG] targetPkg: running [2025-09-07 08:50:39][353628423654202][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-07 08:50:39][353628423654202][259 ms][DEBUG] START check_boot_completed [2025-09-07 08:50:39][353628423654202][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:50:39][353628423654202][291 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:50:39][353628423654202][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:50:39][353628423654202][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:50:39][353628423654202][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:50:39][353628423654202][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:50:39][353628423654202][431 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:50:39][353628423654202][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:50:39][353628423654202][838 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.394/288.394/288.394/0.000 ms\n [2025-09-07 08:50:39][353628423654202][838 ms][DEBUG] check_internet: online [2025-09-07 08:50:39][353628423654202][838 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:50:39][353628423654202][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423654202\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7967\"}'\'' -e'"" [2025-09-07 08:50:39][353628423654202][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:50:39][353628423654202][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423654202\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7967\"}'\'' -e'"" [2025-09-07 08:50:44][353628423654202][5352 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e17aa08-7a6d-4ff3-bbc4-3a67ef2dc39b","id":"QR_3e17aa08-7a6d-4ff3-bbc4-3a67ef2dc39b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:50:44][353628423654202][5508 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-09-07 08:50:44][353628423654202][5508 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-09-07 08:50:44][353628423654202][5508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:52:03][355399274731873][0 ms][INFO] === Request start === [2025-09-07 08:52:03][355399274731873][1 ms][DEBUG] START check_scloud [2025-09-07 08:52:03][355399274731873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:52:03][355399274731873][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 23502 7035 23672636 138068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:52:03][355399274731873][317 ms][DEBUG] targetPkg: running [2025-09-07 08:52:03][355399274731873][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 08:52:03][355399274731873][317 ms][DEBUG] START check_boot_completed [2025-09-07 08:52:03][355399274731873][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:52:04][355399274731873][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:52:04][355399274731873][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:52:04][355399274731873][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:52:04][355399274731873][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:52:04][355399274731873][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:52:04][355399274731873][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:52:04][355399274731873][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:52:04][355399274731873][911 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.765/266.765/266.765/0.000 ms\n [2025-09-07 08:52:04][355399274731873][911 ms][DEBUG] check_internet: online [2025-09-07 08:52:04][355399274731873][911 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:52:04][355399274731873][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399274731873\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8583\"}'\'' -e'"" [2025-09-07 08:52:04][355399274731873][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:52:04][355399274731873][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399274731873\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8583\"}'\'' -e'"" [2025-09-07 08:52:09][355399274731873][5956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8278bac6-3222-42cf-ada5-dd3e8c7a94d5","id":"QR_8278bac6-3222-42cf-ada5-dd3e8c7a94d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:52:09][355399274731873][6112 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 08:52:09][355399274731873][6113 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 08:52:09][355399274731873][6113 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:52:12][355399274731873][0 ms][INFO] === Request start === [2025-09-07 08:52:12][355399274731873][1 ms][DEBUG] START check_scloud [2025-09-07 08:52:12][355399274731873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:52:12][355399274731873][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 23502 7035 23837636 149816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:52:12][355399274731873][328 ms][DEBUG] targetPkg: running [2025-09-07 08:52:12][355399274731873][328 ms][DEBUG] END check_scloud in 328 ms [2025-09-07 08:52:12][355399274731873][328 ms][DEBUG] START check_boot_completed [2025-09-07 08:52:12][355399274731873][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:52:12][355399274731873][375 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 08:52:12][355399274731873][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:52:12][355399274731873][437 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 08:52:12][355399274731873][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:52:12][355399274731873][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:52:12][355399274731873][562 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.29890501130857294\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.12288317131574665\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1851\nsuccessfulRxPacketsPerSecond: 0.23912400904685835\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:52:12][355399274731873][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:52:13][355399274731873][984 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=328 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 328.894/328.894/328.894/0.000 ms\n [2025-09-07 08:52:13][355399274731873][984 ms][DEBUG] check_internet: online [2025-09-07 08:52:13][355399274731873][984 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:52:13][355399274731873][984 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399274731873\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2103\"}'\'' -e'"" [2025-09-07 08:52:13][355399274731873][984 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:52:13][355399274731873][984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399274731873\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2103\"}'\'' -e'"" [2025-09-07 08:52:18][355399274731873][5952 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_521ab98d-d44c-4727-a069-66f29097f901","id":"QR_521ab98d-d44c-4727-a069-66f29097f901","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:52:18][355399274731873][6108 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-07 08:52:18][355399274731873][6108 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-07 08:52:18][355399274731873][6108 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:53:03][350588933361388][1 ms][INFO] === Request start === [2025-09-07 08:53:03][350588933361388][1 ms][DEBUG] START check_scloud [2025-09-07 08:53:03][350588933361388][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:53:03][350588933361388][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23502 7035 23917368 161048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:53:03][350588933361388][311 ms][DEBUG] targetPkg: running [2025-09-07 08:53:03][350588933361388][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 08:53:03][350588933361388][311 ms][DEBUG] START check_boot_completed [2025-09-07 08:53:03][350588933361388][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:53:04][350588933361388][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:53:04][350588933361388][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:53:04][350588933361388][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 08:53:04][350588933361388][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 08:53:04][350588933361388][421 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:53:04][350588933361388][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350588933361388\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6743\"}'\'' -e'"" [2025-09-07 08:53:04][350588933361388][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:53:04][350588933361388][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350588933361388\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6743\"}'\'' -e'"" [2025-09-07 08:53:07][350588933361388][3904 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48a13ff0-5602-4332-bb06-4d47c7fa87c2","id":"QR_48a13ff0-5602-4332-bb06-4d47c7fa87c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:53:07][350588933361388][4060 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-07 08:53:07][350588933361388][4060 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-07 08:53:07][350588933361388][4060 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:57:03][357967975821348][1 ms][INFO] === Request start === [2025-09-07 08:57:03][357967975821348][1 ms][DEBUG] START check_scloud [2025-09-07 08:57:03][357967975821348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:57:03][357967975821348][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 23502 7035 24085496 172212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:57:03][357967975821348][282 ms][DEBUG] targetPkg: running [2025-09-07 08:57:03][357967975821348][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-07 08:57:03][357967975821348][282 ms][DEBUG] START check_boot_completed [2025-09-07 08:57:03][357967975821348][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:57:03][357967975821348][314 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 08:57:03][357967975821348][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:57:03][357967975821348][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:57:03][357967975821348][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 08:57:03][357967975821348][361 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:57:03][357967975821348][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975821348\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-09-07 08:57:03][357967975821348][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:57:03][357967975821348][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975821348\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-09-07 08:57:08][357967975821348][5703 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc000484-83b2-45cd-9745-43c5efa95fbc","id":"QR_bc000484-83b2-45cd-9745-43c5efa95fbc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:57:08][357967975821348][5859 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-07 08:57:08][357967975821348][5859 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-07 08:57:08][357967975821348][5859 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:57:11][357967975821348][0 ms][INFO] === Request start === [2025-09-07 08:57:11][357967975821348][1 ms][DEBUG] START check_scloud [2025-09-07 08:57:11][357967975821348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:57:11][357967975821348][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 23502 7035 24260864 184352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:57:11][357967975821348][321 ms][DEBUG] targetPkg: running [2025-09-07 08:57:11][357967975821348][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 08:57:11][357967975821348][321 ms][DEBUG] START check_boot_completed [2025-09-07 08:57:11][357967975821348][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:57:11][357967975821348][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:57:11][357967975821348][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:57:11][357967975821348][416 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 08:57:11][357967975821348][416 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 08:57:11][357967975821348][417 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:57:11][357967975821348][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975821348\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4731\"}'\'' -e'"" [2025-09-07 08:57:11][357967975821348][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:57:11][357967975821348][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975821348\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4731\"}'\'' -e'"" [2025-09-07 08:57:16][357967975821348][5507 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c55eb1de-f738-4e19-a97c-f353571efb15","id":"QR_c55eb1de-f738-4e19-a97c-f353571efb15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:57:16][357967975821348][5663 ms][DEBUG] proc_open done in 5246 ms; code=255; res.len=3343 [2025-09-07 08:57:16][357967975821348][5663 ms][DEBUG] END runCmdUntilRes#1 in 5246 ms [2025-09-07 08:57:16][357967975821348][5663 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:58:03][358438731291191][0 ms][INFO] === Request start === [2025-09-07 08:58:03][358438731291191][1 ms][DEBUG] START check_scloud [2025-09-07 08:58:03][358438731291191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:58:03][358438731291191][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 23502 7035 24382912 195464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:58:03][358438731291191][312 ms][DEBUG] targetPkg: running [2025-09-07 08:58:03][358438731291191][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 08:58:03][358438731291191][312 ms][DEBUG] START check_boot_completed [2025-09-07 08:58:03][358438731291191][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:58:03][358438731291191][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:58:03][358438731291191][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:58:03][358438731291191][423 ms][DEBUG] SU: done in 64 ms; out [2025-09-07 08:58:03][358438731291191][423 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-07 08:58:03][358438731291191][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:58:04][358438731291191][546 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2174\nsuccessfulTxPacketsPerSecond: 0.1861890297423676\nretriedTxPackets: 514\nretriedTxPacketsPerSecond: 0.07447561189694703\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2058\nsuccessfulRxPacketsPerSecond: 0.164910283486097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:58:04][358438731291191][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:58:05][358438731291191][1874 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.192/294.192/294.192/0.000 ms\n [2025-09-07 08:58:05][358438731291191][1874 ms][DEBUG] check_internet: online [2025-09-07 08:58:05][358438731291191][1874 ms][DEBUG] rawBody.length=1150 [2025-09-07 08:58:05][358438731291191][1874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438731291191\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7774\"}'\'' -e'"" [2025-09-07 08:58:05][358438731291191][1874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:58:05][358438731291191][1874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438731291191\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7774\"}'\'' -e'"" [2025-09-07 08:58:09][358438731291191][5795 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_211b894f-d4e8-49eb-a28c-bda54be12c5e","id":"QR_211b894f-d4e8-49eb-a28c-bda54be12c5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:58:09][358438731291191][5951 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-07 08:58:09][358438731291191][5951 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-07 08:58:09][358438731291191][5951 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 08:58:11][358438731291191][0 ms][INFO] === Request start === [2025-09-07 08:58:11][358438731291191][1 ms][DEBUG] START check_scloud [2025-09-07 08:58:11][358438731291191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 08:58:12][358438731291191][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 23502 7035 24550088 207576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 08:58:12][358438731291191][262 ms][DEBUG] targetPkg: running [2025-09-07 08:58:12][358438731291191][262 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 08:58:12][358438731291191][262 ms][DEBUG] START check_boot_completed [2025-09-07 08:58:12][358438731291191][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 08:58:12][358438731291191][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 08:58:12][358438731291191][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 08:58:12][358438731291191][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 08:58:12][358438731291191][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 08:58:12][358438731291191][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 08:58:12][358438731291191][481 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2174\nsuccessfulTxPacketsPerSecond: 0.1861890297423676\nretriedTxPackets: 514\nretriedTxPacketsPerSecond: 0.07447561189694703\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2058\nsuccessfulRxPacketsPerSecond: 0.164910283486097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 08:58:12][358438731291191][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 08:58:12][358438731291191][840 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.903/248.903/248.903/0.000 ms\n [2025-09-07 08:58:12][358438731291191][840 ms][DEBUG] check_internet: online [2025-09-07 08:58:12][358438731291191][840 ms][DEBUG] rawBody.length=1160 [2025-09-07 08:58:12][358438731291191][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438731291191\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8977\"}'\'' -e'"" [2025-09-07 08:58:12][358438731291191][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 08:58:12][358438731291191][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438731291191\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8977\"}'\'' -e'"" [2025-09-07 08:58:17][358438731291191][5995 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd6a4f45-c6a3-43d0-8c31-ff7e504b1b40","id":"QR_fd6a4f45-c6a3-43d0-8c31-ff7e504b1b40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 08:58:17][358438731291191][6151 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 08:58:17][358438731291191][6151 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 08:58:17][358438731291191][6151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:02:03][356494472554273][1 ms][INFO] === Request start === [2025-09-07 09:02:03][356494472554273][1 ms][DEBUG] START check_scloud [2025-09-07 09:02:03][356494472554273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:02:04][356494472554273][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 23502 7035 24684296 218248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:02:04][356494472554273][311 ms][DEBUG] targetPkg: running [2025-09-07 09:02:04][356494472554273][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 09:02:04][356494472554273][311 ms][DEBUG] START check_boot_completed [2025-09-07 09:02:04][356494472554273][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:02:04][356494472554273][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:02:04][356494472554273][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:02:04][356494472554273][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:02:04][356494472554273][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 09:02:04][356494472554273][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:02:04][356494472554273][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2302\nsuccessfulTxPacketsPerSecond: 0.4215657214372756\nretriedTxPackets: 558\nretriedTxPacketsPerSecond: 0.1449132167440635\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2164\nsuccessfulRxPacketsPerSecond: 0.3491091130652439\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:02:04][356494472554273][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:02:04][356494472554273][889 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.628/265.628/265.628/0.000 ms\n [2025-09-07 09:02:04][356494472554273][889 ms][DEBUG] check_internet: online [2025-09-07 09:02:04][356494472554273][889 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:02:04][356494472554273][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494472554273\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-09-07 09:02:04][356494472554273][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:02:04][356494472554273][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494472554273\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-09-07 09:02:09][356494472554273][5325 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a158f31-1425-4d8c-aa17-3c374bd4bc34","id":"QR_3a158f31-1425-4d8c-aa17-3c374bd4bc34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:02:09][356494472554273][5481 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-07 09:02:09][356494472554273][5481 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-07 09:02:09][356494472554273][5481 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:02:11][356494472554273][0 ms][INFO] === Request start === [2025-09-07 09:02:11][356494472554273][1 ms][DEBUG] START check_scloud [2025-09-07 09:02:11][356494472554273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:02:11][356494472554273][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 23502 7035 24809296 230028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:02:11][356494472554273][297 ms][DEBUG] targetPkg: running [2025-09-07 09:02:11][356494472554273][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 09:02:11][356494472554273][297 ms][DEBUG] START check_boot_completed [2025-09-07 09:02:11][356494472554273][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:02:12][356494472554273][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:02:12][356494472554273][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:02:12][356494472554273][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:02:12][356494472554273][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:02:12][356494472554273][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:02:12][356494472554273][501 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=7549932 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2302\nsuccessfulTxPacketsPerSecond: 0.4215657214372756\nretriedTxPackets: 558\nretriedTxPacketsPerSecond: 0.1449132167440635\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2164\nsuccessfulRxPacketsPerSecond: 0.3491091130652439\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:02:12][356494472554273][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:02:12][356494472554273][843 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.670/226.670/226.670/0.000 ms\n [2025-09-07 09:02:12][356494472554273][844 ms][DEBUG] check_internet: online [2025-09-07 09:02:12][356494472554273][844 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:02:12][356494472554273][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494472554273\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7757\"}'\'' -e'"" [2025-09-07 09:02:12][356494472554273][844 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:02:12][356494472554273][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494472554273\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7757\"}'\'' -e'"" [2025-09-07 09:02:17][356494472554273][5905 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bae39628-1701-43dc-9405-fb96fdb1053b","id":"QR_bae39628-1701-43dc-9405-fb96fdb1053b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:02:17][356494472554273][6061 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 09:02:17][356494472554273][6061 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-07 09:02:17][356494472554273][6061 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:05:04][355731677916646][1 ms][INFO] === Request start === [2025-09-07 09:05:04][355731677916646][1 ms][DEBUG] START check_scloud [2025-09-07 09:05:04][355731677916646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:05:04][355731677916646][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 23502 7035 24950832 138696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:05:04][355731677916646][333 ms][DEBUG] targetPkg: running [2025-09-07 09:05:04][355731677916646][333 ms][DEBUG] END check_scloud in 331 ms [2025-09-07 09:05:04][355731677916646][333 ms][DEBUG] START check_boot_completed [2025-09-07 09:05:04][355731677916646][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:05:04][355731677916646][364 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:05:04][355731677916646][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:05:04][355731677916646][412 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 09:05:04][355731677916646][412 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 09:05:04][355731677916646][412 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:05:04][355731677916646][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677916646\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9848\"}'\'' -e'"" [2025-09-07 09:05:04][355731677916646][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:05:04][355731677916646][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677916646\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9848\"}'\'' -e'"" [2025-09-07 09:05:08][355731677916646][4644 ms][DEBUG] proc_open done in 4232 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 09:05:08][355731677916646][4644 ms][DEBUG] END runCmdUntilRes#1 in 4232 ms [2025-09-07 09:05:08][355731677916646][4644 ms][WARN] Detected error: Process with pid 23502 either refused to load frida-agent, or terminated during injectionProcess with pid 23502 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 09:05:08][355731677916646][4644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 09:05:09][355731677916646][4941 ms][DEBUG] SU: done in 296 ms; outsystem 7231 7035 12766812 220864 ep_poll 0 S system_server\nsystem 26378 1 12566188 129536 ptrace_stop 0 t system_server\n [2025-09-07 09:05:09][355731677916646][4941 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 09:05:09][355731677916646][5097 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 09:05:09][355731677916646][5097 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 09:05:09][355731677916646][5097 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 09:05:09][355731677916646][5222 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 09:05:09][355731677916646][5222 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 09:05:09][355731677916646][5410 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 09:05:11][355731677916646][7424 ms][DEBUG] START check_boot_completed [2025-09-07 09:05:11][355731677916646][7425 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:05:11][355731677916646][7471 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:05:11][355731677916646][7471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:05:11][355731677916646][7534 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 09:05:11][355731677916646][7534 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 09:05:14][355731677916646][10549 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 09:05:14][355731677916646][10549 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677916646\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9848\"}'\'' -e'"" [2025-09-07 09:05:15][355731677916646][11111 ms][DEBUG] proc_open done in 562 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-07 09:05:15][355731677916646][11111 ms][DEBUG] END runCmdUntilRes#2 in 562 ms [2025-09-07 09:05:15][355731677916646][11111 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-07 09:05:15][355731677916646][11111 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 09:05:15][355731677916646][11393 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 09:06:03][355731677916646][0 ms][INFO] === Request start === [2025-09-07 09:06:03][355731677916646][1 ms][DEBUG] START check_scloud [2025-09-07 09:06:03][355731677916646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:06:03][355731677916646][379 ms][DEBUG] SU: done in 378 ms; out [2025-09-07 09:06:03][355731677916646][379 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 09:06:03][355731677916646][426 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 09:06:03][355731677916646][426 ms][DEBUG] check_devices: device found [2025-09-07 09:06:03][355731677916646][426 ms][WARN] targetPkg: not running, restarting [2025-09-07 09:06:03][355731677916646][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 09:06:03][355731677916646][567 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 09:06:03][355731677916646][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 09:06:04][355731677916646][770 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 09:06:06][355731677916646][2785 ms][DEBUG] END check_scloud in 2784 ms [2025-09-07 09:06:06][355731677916646][2785 ms][DEBUG] START check_boot_completed [2025-09-07 09:06:06][355731677916646][2785 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:06:06][355731677916646][2847 ms][DEBUG] ADB: done in 62 ms; out [2025-09-07 09:06:06][355731677916646][2847 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:06:06][355731677916646][2910 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 09:06:06][355731677916646][2910 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 09:06:06][355731677916646][2910 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:06:06][355731677916646][3081 ms][DEBUG] SU: done in 171 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 211\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 14\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 184\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:06:06][355731677916646][3081 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:06:07][355731677916646][3909 ms][DEBUG] SU: done in 828 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.506/219.506/219.506/0.000 ms\n [2025-09-07 09:06:07][355731677916646][3909 ms][DEBUG] check_internet: online [2025-09-07 09:06:07][355731677916646][3910 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:06:07][355731677916646][3910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677916646\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4298\"}'\'' -e'"" [2025-09-07 09:06:07][355731677916646][3910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:06:07][355731677916646][3910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677916646\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4298\"}'\'' -e'"" [2025-09-07 09:06:13][355731677916646][10048 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_412b4668-a786-4d47-b48a-f07113b6ab2d","id":"QR_412b4668-a786-4d47-b48a-f07113b6ab2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:06:13][355731677916646][10205 ms][DEBUG] proc_open done in 6295 ms; code=255; res.len=3343 [2025-09-07 09:06:13][355731677916646][10205 ms][DEBUG] END runCmdUntilRes#1 in 6295 ms [2025-09-07 09:06:13][355731677916646][10205 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:06:15][355731677916646][0 ms][INFO] === Request start === [2025-09-07 09:06:15][355731677916646][1 ms][DEBUG] START check_scloud [2025-09-07 09:06:15][355731677916646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:06:16][355731677916646][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 31291 26588 23782244 119632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:06:16][355731677916646][336 ms][DEBUG] targetPkg: running [2025-09-07 09:06:16][355731677916646][336 ms][DEBUG] END check_scloud in 335 ms [2025-09-07 09:06:16][355731677916646][336 ms][DEBUG] START check_boot_completed [2025-09-07 09:06:16][355731677916646][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:06:16][355731677916646][382 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:06:16][355731677916646][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:06:16][355731677916646][445 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:06:16][355731677916646][445 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:06:16][355731677916646][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:06:16][355731677916646][554 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 211\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 14\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 184\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:06:16][355731677916646][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:06:16][355731677916646][960 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.441/305.441/305.441/0.000 ms\n [2025-09-07 09:06:16][355731677916646][961 ms][DEBUG] check_internet: online [2025-09-07 09:06:16][355731677916646][961 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:06:16][355731677916646][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677916646\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7623\"}'\'' -e'"" [2025-09-07 09:06:16][355731677916646][961 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:06:16][355731677916646][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731677916646\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7623\"}'\'' -e'"" [2025-09-07 09:06:22][355731677916646][6818 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d705137-1718-4e1b-9a5c-8b0848c96615","id":"QR_9d705137-1718-4e1b-9a5c-8b0848c96615","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:06:22][355731677916646][6974 ms][DEBUG] proc_open done in 6013 ms; code=255; res.len=3343 [2025-09-07 09:06:22][355731677916646][6974 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-09-07 09:06:22][355731677916646][6974 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:10:04][354068195814891][0 ms][INFO] === Request start === [2025-09-07 09:10:04][354068195814891][0 ms][DEBUG] START check_scloud [2025-09-07 09:10:04][354068195814891][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:10:04][354068195814891][388 ms][DEBUG] SU: done in 387 ms; outu0_a118 31291 26588 23851600 72140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:10:04][354068195814891][388 ms][DEBUG] targetPkg: running [2025-09-07 09:10:04][354068195814891][388 ms][DEBUG] END check_scloud in 387 ms [2025-09-07 09:10:04][354068195814891][388 ms][DEBUG] START check_boot_completed [2025-09-07 09:10:04][354068195814891][388 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:10:04][354068195814891][419 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:10:04][354068195814891][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:10:04][354068195814891][466 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:10:04][354068195814891][466 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 09:10:04][354068195814891][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:10:04][354068195814891][591 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 681\nsuccessfulTxPacketsPerSecond: 6.51391677387499\nretriedTxPackets: 106\nretriedTxPacketsPerSecond: 1.2245364593376549\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 714\nsuccessfulRxPacketsPerSecond: 5.920084602624756\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:10:04][354068195814891][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:10:05][354068195814891][1028 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.660/278.660/278.660/0.000 ms\n [2025-09-07 09:10:05][354068195814891][1028 ms][DEBUG] check_internet: online [2025-09-07 09:10:05][354068195814891][1028 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:10:05][354068195814891][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195814891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1995\"}'\'' -e'"" [2025-09-07 09:10:05][354068195814891][1029 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:10:05][354068195814891][1029 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195814891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1995\"}'\'' -e'"" [2025-09-07 09:10:10][354068195814891][6386 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee2c90ac-bd6b-4490-af55-4d515ffdf09b","id":"QR_ee2c90ac-bd6b-4490-af55-4d515ffdf09b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:10:10][354068195814891][6542 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-07 09:10:10][354068195814891][6542 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 09:10:10][354068195814891][6543 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:10:13][354068195814891][1 ms][INFO] === Request start === [2025-09-07 09:10:13][354068195814891][1 ms][DEBUG] START check_scloud [2025-09-07 09:10:13][354068195814891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:10:13][354068195814891][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 31291 26588 23981912 84436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:10:13][354068195814891][341 ms][DEBUG] targetPkg: running [2025-09-07 09:10:13][354068195814891][341 ms][DEBUG] END check_scloud in 340 ms [2025-09-07 09:10:13][354068195814891][341 ms][DEBUG] START check_boot_completed [2025-09-07 09:10:13][354068195814891][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:10:13][354068195814891][388 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:10:13][354068195814891][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:10:13][354068195814891][435 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:10:13][354068195814891][435 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:10:13][354068195814891][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:10:13][354068195814891][544 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 681\nsuccessfulTxPacketsPerSecond: 6.51391677387499\nretriedTxPackets: 106\nretriedTxPacketsPerSecond: 1.2245364593376549\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 714\nsuccessfulRxPacketsPerSecond: 5.920084602624756\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:10:13][354068195814891][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:10:14][354068195814891][919 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.274/246.274/246.274/0.000 ms\n [2025-09-07 09:10:14][354068195814891][919 ms][DEBUG] check_internet: online [2025-09-07 09:10:14][354068195814891][919 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:10:14][354068195814891][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195814891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3774\"}'\'' -e'"" [2025-09-07 09:10:14][354068195814891][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:10:14][354068195814891][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195814891\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3774\"}'\'' -e'"" [2025-09-07 09:10:19][354068195814891][5871 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7a5a768-d1ea-4fd7-9d27-6b97a35b32eb","id":"QR_b7a5a768-d1ea-4fd7-9d27-6b97a35b32eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:10:19][354068195814891][6027 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-07 09:10:19][354068195814891][6027 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-09-07 09:10:19][354068195814891][6027 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:12:03][351978523354605][0 ms][INFO] === Request start === [2025-09-07 09:12:03][351978523354605][1 ms][DEBUG] START check_scloud [2025-09-07 09:12:03][351978523354605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:12:03][351978523354605][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 31291 26588 24091608 100904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:12:03][351978523354605][329 ms][DEBUG] targetPkg: running [2025-09-07 09:12:03][351978523354605][329 ms][DEBUG] END check_scloud in 329 ms [2025-09-07 09:12:03][351978523354605][329 ms][DEBUG] START check_boot_completed [2025-09-07 09:12:03][351978523354605][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:12:03][351978523354605][376 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:12:03][351978523354605][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:12:03][351978523354605][423 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:12:03][351978523354605][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:12:03][351978523354605][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:12:03][351978523354605][548 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 918\nsuccessfulTxPacketsPerSecond: 0.9824730130830583\nretriedTxPackets: 158\nretriedTxPacketsPerSecond: 0.2155636990730761\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 936\nsuccessfulRxPacketsPerSecond: 0.9202911768119787\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:12:03][351978523354605][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:12:05][351978523354605][1798 ms][DEBUG] SU: done in 1250 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.332/219.332/219.332/0.000 ms\n [2025-09-07 09:12:05][351978523354605][1798 ms][DEBUG] check_internet: online [2025-09-07 09:12:05][351978523354605][1798 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:12:05][351978523354605][1798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523354605\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6929\"}'\'' -e'"" [2025-09-07 09:12:05][351978523354605][1798 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:12:05][351978523354605][1798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523354605\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6929\"}'\'' -e'"" [2025-09-07 09:12:08][351978523354605][5390 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6131ba56-8e22-49e4-b572-57c320e8534e","id":"QR_6131ba56-8e22-49e4-b572-57c320e8534e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:12:08][351978523354605][5547 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-07 09:12:08][351978523354605][5547 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-07 09:12:08][351978523354605][5547 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:12:11][351978523354605][1 ms][INFO] === Request start === [2025-09-07 09:12:11][351978523354605][1 ms][DEBUG] START check_scloud [2025-09-07 09:12:11][351978523354605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:12:11][351978523354605][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 31291 26588 24272032 112136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:12:11][351978523354605][255 ms][DEBUG] targetPkg: running [2025-09-07 09:12:11][351978523354605][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-07 09:12:11][351978523354605][255 ms][DEBUG] START check_boot_completed [2025-09-07 09:12:11][351978523354605][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:12:11][351978523354605][286 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:12:11][351978523354605][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:12:11][351978523354605][334 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 09:12:11][351978523354605][334 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 09:12:11][351978523354605][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:12:11][351978523354605][459 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 918\nsuccessfulTxPacketsPerSecond: 0.9824730130830583\nretriedTxPackets: 158\nretriedTxPacketsPerSecond: 0.2155636990730761\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 936\nsuccessfulRxPacketsPerSecond: 0.9202911768119787\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:12:11][351978523354605][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:12:11][351978523354605][788 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.174/226.174/226.174/0.000 ms\n [2025-09-07 09:12:11][351978523354605][788 ms][DEBUG] check_internet: online [2025-09-07 09:12:11][351978523354605][788 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:12:11][351978523354605][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523354605\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8023\"}'\'' -e'"" [2025-09-07 09:12:11][351978523354605][788 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:12:11][351978523354605][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523354605\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8023\"}'\'' -e'"" [2025-09-07 09:12:17][351978523354605][6066 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58974db0-e17d-4821-9858-bccf5364e9ec","id":"QR_58974db0-e17d-4821-9858-bccf5364e9ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:12:17][351978523354605][6223 ms][DEBUG] proc_open done in 5434 ms; code=255; res.len=3343 [2025-09-07 09:12:17][351978523354605][6223 ms][DEBUG] END runCmdUntilRes#1 in 5434 ms [2025-09-07 09:12:17][351978523354605][6223 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:18:03][355497592335003][1 ms][INFO] === Request start === [2025-09-07 09:18:03][355497592335003][1 ms][DEBUG] START check_scloud [2025-09-07 09:18:03][355497592335003][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:18:03][355497592335003][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 31291 26588 24385760 123532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:18:03][355497592335003][315 ms][DEBUG] targetPkg: running [2025-09-07 09:18:03][355497592335003][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 09:18:03][355497592335003][315 ms][DEBUG] START check_boot_completed [2025-09-07 09:18:03][355497592335003][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:18:03][355497592335003][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:18:03][355497592335003][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:18:03][355497592335003][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:18:03][355497592335003][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 09:18:03][355497592335003][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:18:03][355497592335003][502 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1064\nsuccessfulTxPacketsPerSecond: 0.48480179575898047\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.13614297004190548\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1062\nsuccessfulRxPacketsPerSecond: 0.41839059086048996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:18:03][355497592335003][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:18:05][355497592335003][1908 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.880/299.880/299.880/0.000 ms\n [2025-09-07 09:18:05][355497592335003][1908 ms][DEBUG] check_internet: online [2025-09-07 09:18:05][355497592335003][1908 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:18:05][355497592335003][1908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497592335003\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4097\"}'\'' -e'"" [2025-09-07 09:18:05][355497592335003][1908 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:18:05][355497592335003][1908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497592335003\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4097\"}'\'' -e'"" [2025-09-07 09:18:09][355497592335003][5860 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57af6456-a320-4192-89a4-723b24502010","id":"QR_57af6456-a320-4192-89a4-723b24502010","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:18:09][355497592335003][6016 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-07 09:18:09][355497592335003][6016 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-07 09:18:09][355497592335003][6017 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:18:11][355497592335003][0 ms][INFO] === Request start === [2025-09-07 09:18:11][355497592335003][1 ms][DEBUG] START check_scloud [2025-09-07 09:18:11][355497592335003][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:18:11][355497592335003][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 31291 26588 24552808 134296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:18:11][355497592335003][271 ms][DEBUG] targetPkg: running [2025-09-07 09:18:11][355497592335003][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-07 09:18:11][355497592335003][271 ms][DEBUG] START check_boot_completed [2025-09-07 09:18:11][355497592335003][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:18:11][355497592335003][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:18:11][355497592335003][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:18:12][355497592335003][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:18:12][355497592335003][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:18:12][355497592335003][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:18:12][355497592335003][475 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=11738089 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1064\nsuccessfulTxPacketsPerSecond: 0.48480179575898047\nretriedTxPackets: 199\nretriedTxPacketsPerSecond: 0.13614297004190548\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1062\nsuccessfulRxPacketsPerSecond: 0.41839059086048996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:18:12][355497592335003][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:18:12][355497592335003][817 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.577/226.577/226.577/0.000 ms\n [2025-09-07 09:18:12][355497592335003][817 ms][DEBUG] check_internet: online [2025-09-07 09:18:12][355497592335003][818 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:18:12][355497592335003][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497592335003\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7659\"}'\'' -e'"" [2025-09-07 09:18:12][355497592335003][818 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:18:12][355497592335003][818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497592335003\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7659\"}'\'' -e'"" [2025-09-07 09:18:17][355497592335003][6207 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a37d5b4-95a5-4ff1-822c-cfad00a7d4be","id":"QR_5a37d5b4-95a5-4ff1-822c-cfad00a7d4be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:18:18][355497592335003][6363 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-07 09:18:18][355497592335003][6363 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-07 09:18:18][355497592335003][6363 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:27:05][350655882847848][1 ms][INFO] === Request start === [2025-09-07 09:27:05][350655882847848][1 ms][DEBUG] START check_scloud [2025-09-07 09:27:05][350655882847848][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:27:05][350655882847848][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 31291 26588 24624604 143352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:27:05][350655882847848][313 ms][DEBUG] targetPkg: running [2025-09-07 09:27:05][350655882847848][313 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 09:27:05][350655882847848][313 ms][DEBUG] START check_boot_completed [2025-09-07 09:27:05][350655882847848][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:27:05][350655882847848][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:27:05][350655882847848][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:27:05][350655882847848][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:27:05][350655882847848][391 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 09:27:05][350655882847848][391 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:27:05][350655882847848][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882847848\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2714\"}'\'' -e'"" [2025-09-07 09:27:05][350655882847848][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:27:05][350655882847848][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882847848\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2714\"}'\'' -e'"" [2025-09-07 09:27:11][350655882847848][6358 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb157136-2558-44b0-96c9-472dbf93cd2a","id":"QR_fb157136-2558-44b0-96c9-472dbf93cd2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:27:11][350655882847848][6514 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-07 09:27:11][350655882847848][6514 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-07 09:27:11][350655882847848][6514 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:27:15][350655882847848][0 ms][INFO] === Request start === [2025-09-07 09:27:15][350655882847848][1 ms][DEBUG] START check_scloud [2025-09-07 09:27:15][350655882847848][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:27:15][350655882847848][330 ms][DEBUG] SU: done in 330 ms; outu0_a118 31291 26588 24765352 154732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:27:15][350655882847848][331 ms][DEBUG] targetPkg: running [2025-09-07 09:27:15][350655882847848][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-07 09:27:15][350655882847848][331 ms][DEBUG] START check_boot_completed [2025-09-07 09:27:15][350655882847848][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:27:15][350655882847848][377 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:27:15][350655882847848][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:27:15][350655882847848][424 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:27:15][350655882847848][424 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:27:15][350655882847848][424 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:27:15][350655882847848][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882847848\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4355\"}'\'' -e'"" [2025-09-07 09:27:15][350655882847848][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:27:15][350655882847848][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882847848\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4355\"}'\'' -e'"" [2025-09-07 09:27:19][350655882847848][3970 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bedfacf-7956-40cb-b18c-cdf35f0b0ff1","id":"QR_1bedfacf-7956-40cb-b18c-cdf35f0b0ff1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:27:19][350655882847848][4126 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-07 09:27:19][350655882847848][4126 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-07 09:27:19][350655882847848][4126 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:27:21][350973421554795][1 ms][INFO] === Request start === [2025-09-07 09:27:21][350973421554795][1 ms][DEBUG] START check_scloud [2025-09-07 09:27:21][350973421554795][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:27:21][350973421554795][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 31291 26588 24946864 165624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:27:21][350973421554795][316 ms][DEBUG] targetPkg: running [2025-09-07 09:27:21][350973421554795][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 09:27:21][350973421554795][316 ms][DEBUG] START check_boot_completed [2025-09-07 09:27:21][350973421554795][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:27:21][350973421554795][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:27:21][350973421554795][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:27:21][350973421554795][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:27:21][350973421554795][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:27:21][350973421554795][410 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:27:21][350973421554795][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421554795\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6738\"}'\'' -e'"" [2025-09-07 09:27:21][350973421554795][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:27:21][350973421554795][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421554795\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6738\"}'\'' -e'"" [2025-09-07 09:27:24][350973421554795][3737 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e991d36-e7a6-4af2-b683-526e9480aa6a","id":"QR_3e991d36-e7a6-4af2-b683-526e9480aa6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:27:25][350973421554795][3893 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-07 09:27:25][350973421554795][3893 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-07 09:27:25][350973421554795][3893 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:27:27][350973421554795][0 ms][INFO] === Request start === [2025-09-07 09:27:27][350973421554795][1 ms][DEBUG] START check_scloud [2025-09-07 09:27:27][350973421554795][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:27:27][350973421554795][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31291 26588 25070996 177456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:27:27][350973421554795][310 ms][DEBUG] targetPkg: running [2025-09-07 09:27:27][350973421554795][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 09:27:27][350973421554795][310 ms][DEBUG] START check_boot_completed [2025-09-07 09:27:27][350973421554795][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:27:27][350973421554795][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:27:27][350973421554795][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:27:27][350973421554795][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:27:27][350973421554795][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:27:27][350973421554795][404 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:27:27][350973421554795][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421554795\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1979\"}'\'' -e'"" [2025-09-07 09:27:27][350973421554795][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:27:27][350973421554795][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421554795\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1979\"}'\'' -e'"" [2025-09-07 09:27:36][350973421554795][9073 ms][DEBUG] proc_open done in 8669 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 09:27:36][350973421554795][9074 ms][DEBUG] END runCmdUntilRes#1 in 8669 ms [2025-09-07 09:27:36][350973421554795][9074 ms][WARN] Detected error: Process with pid 31291 either refused to load frida-agent, or terminated during injectionProcess with pid 31291 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 09:27:36][350973421554795][9074 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 09:27:36][350973421554795][9401 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 09:27:36][350973421554795][9401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 09:27:37][350973421554795][9714 ms][DEBUG] SU: done in 312 ms; out [2025-09-07 09:27:37][350973421554795][9714 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 09:27:37][350973421554795][9714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 09:27:37][350973421554795][10074 ms][DEBUG] SU: done in 360 ms; out [2025-09-07 09:27:37][350973421554795][10074 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 09:27:37][350973421554795][10339 ms][DEBUG] SU: done in 264 ms; out [2025-09-07 09:27:39][350973421554795][12354 ms][DEBUG] START check_boot_completed [2025-09-07 09:27:39][350973421554795][12354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:27:39][350973421554795][12401 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:27:39][350973421554795][12401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:27:39][350973421554795][12463 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:27:39][350973421554795][12463 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 09:27:42][350973421554795][15478 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 09:27:42][350973421554795][15478 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973421554795\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1979\"}'\'' -e'"" [2025-09-07 09:27:44][350973421554795][17056 ms][DEBUG] proc_open done in 1578 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 09:27:44][350973421554795][17056 ms][DEBUG] END runCmdUntilRes#2 in 1578 ms [2025-09-07 09:27:44][350973421554795][17056 ms][WARN] Detected error 2; Reboot the device [2025-09-07 09:27:44][350973421554795][17056 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 09:27:44][350973421554795][17321 ms][DEBUG] SU: done in 265 ms; outsystem 8402 8064 7485144 143676 0 0 R system_server\n [2025-09-07 09:27:44][350973421554795][17321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 09:27:45][350973421554795][17946 ms][DEBUG] SU: done in 625 ms; out [2025-09-07 09:28:03][352946242454583][0 ms][INFO] === Request start === [2025-09-07 09:28:03][352946242454583][1 ms][DEBUG] START check_scloud [2025-09-07 09:28:03][352946242454583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:28:03][352946242454583][31 ms][DEBUG] SU: done in 30 ms; out [2025-09-07 09:28:03][352946242454583][31 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 09:28:03][352946242454583][62 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 09:28:03][352946242454583][62 ms][WARN] check_devices: no device [2025-09-07 09:28:03][352946242454583][62 ms][WARN] check_devices: no device [2025-09-07 09:28:03][352946242454583][62 ms][DEBUG] END check_scloud in 62 ms [2025-09-07 09:28:07][356414818901285][0 ms][INFO] === Request start === [2025-09-07 09:28:07][356414818901285][0 ms][DEBUG] START check_scloud [2025-09-07 09:28:07][356414818901285][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:28:07][356414818901285][26 ms][DEBUG] SU: done in 26 ms; out [2025-09-07 09:28:07][356414818901285][26 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 09:28:07][356414818901285][58 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 09:28:07][356414818901285][58 ms][WARN] check_devices: no device [2025-09-07 09:28:07][356414818901285][58 ms][WARN] check_devices: no device [2025-09-07 09:28:07][356414818901285][58 ms][DEBUG] END check_scloud in 58 ms [2025-09-07 09:29:03][352946242454583][0 ms][INFO] === Request start === [2025-09-07 09:29:03][352946242454583][1 ms][DEBUG] START check_scloud [2025-09-07 09:29:03][352946242454583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:29:03][352946242454583][358 ms][DEBUG] SU: done in 358 ms; out [2025-09-07 09:29:03][352946242454583][359 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 09:29:03][352946242454583][405 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 09:29:03][352946242454583][405 ms][DEBUG] check_devices: device found [2025-09-07 09:29:03][352946242454583][405 ms][WARN] targetPkg: not running, restarting [2025-09-07 09:29:03][352946242454583][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 09:29:03][352946242454583][546 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 09:29:03][352946242454583][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 09:29:03][352946242454583][796 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 09:29:05][352946242454583][2811 ms][DEBUG] END check_scloud in 2810 ms [2025-09-07 09:29:05][352946242454583][2811 ms][DEBUG] START check_boot_completed [2025-09-07 09:29:05][352946242454583][2811 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:29:06][352946242454583][2858 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:29:06][352946242454583][2858 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:29:06][352946242454583][2920 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:29:06][352946242454583][2920 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 09:29:06][352946242454583][2921 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:29:06][352946242454583][2921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946242454583\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9442\"}'\'' -e'"" [2025-09-07 09:29:06][352946242454583][2921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:29:06][352946242454583][2921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946242454583\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9442\"}'\'' -e'"" [2025-09-07 09:29:11][352946242454583][8575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5a4d0a2-cc98-435a-978e-455b5956918f","id":"QR_b5a4d0a2-cc98-435a-978e-455b5956918f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:29:11][352946242454583][8731 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-07 09:29:11][352946242454583][8731 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-07 09:29:11][352946242454583][8732 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:29:14][352946242454583][1 ms][INFO] === Request start === [2025-09-07 09:29:14][352946242454583][1 ms][DEBUG] START check_scloud [2025-09-07 09:29:14][352946242454583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:29:15][352946242454583][371 ms][DEBUG] SU: done in 370 ms; outu0_a118 8865 4973 23808612 106912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:29:15][352946242454583][371 ms][DEBUG] targetPkg: running [2025-09-07 09:29:15][352946242454583][371 ms][DEBUG] END check_scloud in 370 ms [2025-09-07 09:29:15][352946242454583][371 ms][DEBUG] START check_boot_completed [2025-09-07 09:29:15][352946242454583][371 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:29:15][352946242454583][402 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:29:15][352946242454583][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:29:15][352946242454583][465 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 09:29:15][352946242454583][465 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:29:15][352946242454583][465 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:29:15][352946242454583][465 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946242454583\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9797\"}'\'' -e'"" [2025-09-07 09:29:15][352946242454583][465 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:29:15][352946242454583][465 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352946242454583\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9797\"}'\'' -e'"" [2025-09-07 09:29:22][352946242454583][7807 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eebc0e03-ae44-4c69-afd4-a5ba55831844","id":"QR_eebc0e03-ae44-4c69-afd4-a5ba55831844","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:29:22][352946242454583][7963 ms][DEBUG] proc_open done in 7497 ms; code=255; res.len=3343 [2025-09-07 09:29:22][352946242454583][7963 ms][DEBUG] END runCmdUntilRes#1 in 7498 ms [2025-09-07 09:29:22][352946242454583][7963 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:29:27][356414818901285][0 ms][INFO] === Request start === [2025-09-07 09:29:27][356414818901285][1 ms][DEBUG] START check_scloud [2025-09-07 09:29:27][356414818901285][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:29:27][356414818901285][413 ms][DEBUG] SU: done in 412 ms; outu0_a118 8865 4973 23969520 80484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:29:27][356414818901285][413 ms][DEBUG] targetPkg: running [2025-09-07 09:29:27][356414818901285][413 ms][DEBUG] END check_scloud in 412 ms [2025-09-07 09:29:27][356414818901285][413 ms][DEBUG] START check_boot_completed [2025-09-07 09:29:27][356414818901285][413 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:29:27][356414818901285][444 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:29:27][356414818901285][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:29:27][356414818901285][507 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 09:29:27][356414818901285][507 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:29:27][356414818901285][507 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:29:27][356414818901285][507 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818901285\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-09-07 09:29:27][356414818901285][507 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:29:27][356414818901285][507 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818901285\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-09-07 09:29:32][356414818901285][5583 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a2b7a83-27f8-442c-8922-968880a27f4d","id":"QR_8a2b7a83-27f8-442c-8922-968880a27f4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:29:32][356414818901285][5740 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-07 09:29:32][356414818901285][5740 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-07 09:29:32][356414818901285][5740 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:29:35][356414818901285][0 ms][INFO] === Request start === [2025-09-07 09:29:35][356414818901285][1 ms][DEBUG] START check_scloud [2025-09-07 09:29:35][356414818901285][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:29:35][356414818901285][374 ms][DEBUG] SU: done in 373 ms; outu0_a118 8865 4973 24101500 76772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:29:35][356414818901285][374 ms][DEBUG] targetPkg: running [2025-09-07 09:29:35][356414818901285][374 ms][DEBUG] END check_scloud in 373 ms [2025-09-07 09:29:35][356414818901285][374 ms][DEBUG] START check_boot_completed [2025-09-07 09:29:35][356414818901285][374 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:29:35][356414818901285][405 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:29:35][356414818901285][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:29:35][356414818901285][468 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 09:29:35][356414818901285][468 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:29:35][356414818901285][468 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:29:35][356414818901285][468 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818901285\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3065\"}'\'' -e'"" [2025-09-07 09:29:35][356414818901285][468 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:29:35][356414818901285][468 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818901285\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3065\"}'\'' -e'"" [2025-09-07 09:29:41][356414818901285][6216 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38401183-21a8-4885-9839-a600f068c6a2","id":"QR_38401183-21a8-4885-9839-a600f068c6a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:29:41][356414818901285][6372 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=3343 [2025-09-07 09:29:41][356414818901285][6372 ms][DEBUG] END runCmdUntilRes#1 in 5904 ms [2025-09-07 09:29:41][356414818901285][6372 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:35:03][351477977557896][1 ms][INFO] === Request start === [2025-09-07 09:35:03][351477977557896][1 ms][DEBUG] START check_scloud [2025-09-07 09:35:03][351477977557896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:35:03][351477977557896][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 8865 4973 24177076 70708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:35:03][351477977557896][274 ms][DEBUG] targetPkg: running [2025-09-07 09:35:03][351477977557896][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-07 09:35:03][351477977557896][274 ms][DEBUG] START check_boot_completed [2025-09-07 09:35:03][351477977557896][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:35:03][351477977557896][305 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:35:03][351477977557896][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:35:03][351477977557896][353 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 09:35:03][351477977557896][353 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 09:35:03][351477977557896][353 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:35:03][351477977557896][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977557896\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8551\"}'\'' -e'"" [2025-09-07 09:35:03][351477977557896][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:35:03][351477977557896][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977557896\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8551\"}'\'' -e'"" [2025-09-07 09:35:08][351477977557896][5335 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba055288-16a4-454d-accc-22b66886614d","id":"QR_ba055288-16a4-454d-accc-22b66886614d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:35:09][351477977557896][5491 ms][DEBUG] proc_open done in 5138 ms; code=255; res.len=3343 [2025-09-07 09:35:09][351477977557896][5491 ms][DEBUG] END runCmdUntilRes#1 in 5138 ms [2025-09-07 09:35:09][351477977557896][5492 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:35:11][351477977557896][0 ms][INFO] === Request start === [2025-09-07 09:35:11][351477977557896][1 ms][DEBUG] START check_scloud [2025-09-07 09:35:11][351477977557896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:35:11][351477977557896][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 8865 4973 24317628 90416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:35:11][351477977557896][309 ms][DEBUG] targetPkg: running [2025-09-07 09:35:11][351477977557896][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 09:35:11][351477977557896][309 ms][DEBUG] START check_boot_completed [2025-09-07 09:35:11][351477977557896][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:35:11][351477977557896][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:35:11][351477977557896][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:35:11][351477977557896][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:35:11][351477977557896][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:35:11][351477977557896][418 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:35:11][351477977557896][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977557896\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2589\"}'\'' -e'"" [2025-09-07 09:35:11][351477977557896][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:35:11][351477977557896][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977557896\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2589\"}'\'' -e'"" [2025-09-07 09:35:16][351477977557896][5339 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f563ed27-bb81-4503-b808-7dc466e79e22","id":"QR_f563ed27-bb81-4503-b808-7dc466e79e22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:35:17][351477977557896][5495 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-07 09:35:17][351477977557896][5495 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-07 09:35:17][351477977557896][5495 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:40:04][351165708231283][1 ms][INFO] === Request start === [2025-09-07 09:40:04][351165708231283][1 ms][DEBUG] START check_scloud [2025-09-07 09:40:04][351165708231283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:40:05][351165708231283][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 8865 4973 24436532 97704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:40:05][351165708231283][307 ms][DEBUG] targetPkg: running [2025-09-07 09:40:05][351165708231283][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 09:40:05][351165708231283][307 ms][DEBUG] START check_boot_completed [2025-09-07 09:40:05][351165708231283][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:40:05][351165708231283][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:40:05][351165708231283][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:40:05][351165708231283][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:40:05][351165708231283][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 09:40:05][351165708231283][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:40:05][351165708231283][526 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1391\nsuccessfulTxPacketsPerSecond: 0.4684945707792294\nretriedTxPackets: 244\nretriedTxPacketsPerSecond: 0.12293829162291836\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1410\nsuccessfulRxPacketsPerSecond: 0.4086867532329448\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:40:05][351165708231283][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:40:07][351165708231283][2104 ms][DEBUG] SU: done in 1577 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.724/220.724/220.724/0.000 ms\n [2025-09-07 09:40:07][351165708231283][2104 ms][DEBUG] check_internet: online [2025-09-07 09:40:07][351165708231283][2104 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:40:07][351165708231283][2104 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165708231283\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1486\"}'\'' -e'"" [2025-09-07 09:40:07][351165708231283][2104 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:40:07][351165708231283][2104 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165708231283\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1486\"}'\'' -e'"" [2025-09-07 09:40:10][351165708231283][5837 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-07 09:40:10][351165708231283][5993 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-09-07 09:40:10][351165708231283][5993 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-07 09:40:10][351165708231283][5994 ms][INFO] SUCCESS response from frida (len=107) [2025-09-07 09:40:11][][0 ms][INFO] === Request start === [2025-09-07 09:40:11][][1 ms][DEBUG] START check_scloud [2025-09-07 09:40:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:40:11][][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 8865 4973 24589244 108644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:40:11][][259 ms][DEBUG] targetPkg: running [2025-09-07 09:40:11][][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 09:40:11][][259 ms][DEBUG] START check_boot_completed [2025-09-07 09:40:11][][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:40:11][][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:40:11][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:40:11][][368 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 09:40:11][][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:40:11][][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:40:11][][509 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1391\nsuccessfulTxPacketsPerSecond: 0.4684945707792294\nretriedTxPackets: 244\nretriedTxPacketsPerSecond: 0.12293829162291836\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1410\nsuccessfulRxPacketsPerSecond: 0.4086867532329448\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:40:11][][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:40:12][][821 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.281/225.281/225.281/0.000 ms\n [2025-09-07 09:40:12][][821 ms][DEBUG] check_internet: online [2025-09-07 09:40:12][][821 ms][DEBUG] rawBody.length=1131 [2025-09-07 09:40:12][][821 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCXC00X8GZ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4358\"}'\'' -e'"" [2025-09-07 09:40:12][][821 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:40:12][][821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCXC00X8GZ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4358\"}'\'' -e'"" [2025-09-07 09:40:15][][4180 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-07 09:40:15][][4336 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=107 [2025-09-07 09:40:15][][4336 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-07 09:40:15][][4336 ms][INFO] SUCCESS response from frida (len=107) [2025-09-07 09:40:17][351165708231283][0 ms][INFO] === Request start === [2025-09-07 09:40:17][351165708231283][1 ms][DEBUG] START check_scloud [2025-09-07 09:40:17][351165708231283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:40:17][351165708231283][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 8865 4973 24711300 120436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:40:17][351165708231283][325 ms][DEBUG] targetPkg: running [2025-09-07 09:40:17][351165708231283][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-07 09:40:17][351165708231283][325 ms][DEBUG] START check_boot_completed [2025-09-07 09:40:17][351165708231283][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:40:17][351165708231283][372 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:40:17][351165708231283][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:40:17][351165708231283][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:40:17][351165708231283][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:40:17][351165708231283][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:40:17][351165708231283][575 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1391\nsuccessfulTxPacketsPerSecond: 0.4684945707792294\nretriedTxPackets: 244\nretriedTxPacketsPerSecond: 0.12293829162291836\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1410\nsuccessfulRxPacketsPerSecond: 0.4086867532329448\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:40:17][351165708231283][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:40:18][351165708231283][1027 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.852/341.852/341.852/0.000 ms\n [2025-09-07 09:40:18][351165708231283][1027 ms][DEBUG] check_internet: online [2025-09-07 09:40:18][351165708231283][1027 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:40:18][351165708231283][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165708231283\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6915\"}'\'' -e'"" [2025-09-07 09:40:18][351165708231283][1028 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:40:18][351165708231283][1028 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165708231283\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6915\"}'\'' -e'"" [2025-09-07 09:40:23][351165708231283][5979 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9ecb523-3956-475e-a6a9-7c29b931e893","id":"QR_a9ecb523-3956-475e-a6a9-7c29b931e893","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:40:23][351165708231283][6136 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-07 09:40:23][351165708231283][6136 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-07 09:40:23][351165708231283][6136 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:43:03][350635582192521][1 ms][INFO] === Request start === [2025-09-07 09:43:03][350635582192521][1 ms][DEBUG] START check_scloud [2025-09-07 09:43:03][350635582192521][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:43:03][350635582192521][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 8865 4973 24786208 131808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:43:03][350635582192521][306 ms][DEBUG] targetPkg: running [2025-09-07 09:43:03][350635582192521][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 09:43:03][350635582192521][306 ms][DEBUG] START check_boot_completed [2025-09-07 09:43:03][350635582192521][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:43:03][350635582192521][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:43:03][350635582192521][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:43:03][350635582192521][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:43:03][350635582192521][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 09:43:03][350635582192521][384 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:43:03][350635582192521][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635582192521\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-09-07 09:43:03][350635582192521][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:43:03][350635582192521][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635582192521\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-09-07 09:43:07][350635582192521][3976 ms][DEBUG] frida res:res:{"code":5000300,"message":"DEVICE_OPERATION_EXCEPTION","data":"Response from uploadDevicesToServiceFromKdms was empty"}\r\n [2025-09-07 09:43:07][350635582192521][4133 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=119 [2025-09-07 09:43:07][350635582192521][4133 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-07 09:43:07][350635582192521][4133 ms][INFO] SUCCESS response from frida (len=119) [2025-09-07 09:43:07][][0 ms][INFO] === Request start === [2025-09-07 09:43:07][][1 ms][DEBUG] START check_scloud [2025-09-07 09:43:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:43:07][][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 8865 4973 24922536 143600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:43:07][][258 ms][DEBUG] targetPkg: running [2025-09-07 09:43:07][][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-07 09:43:07][][258 ms][DEBUG] START check_boot_completed [2025-09-07 09:43:07][][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:43:07][][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:43:07][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:43:07][][351 ms][DEBUG] SU: done in 46 ms; out [2025-09-07 09:43:07][][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:43:07][][351 ms][DEBUG] rawBody.length=1131 [2025-09-07 09:43:07][][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR80BTAGB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7846\"}'\'' -e'"" [2025-09-07 09:43:07][][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:43:07][][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR80BTAGB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7846\"}'\'' -e'"" [2025-09-07 09:43:11][][3522 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 09:43:11][][3678 ms][DEBUG] proc_open done in 3327 ms; code=255; res.len=115 [2025-09-07 09:43:11][][3678 ms][DEBUG] END runCmdUntilRes#1 in 3327 ms [2025-09-07 09:43:11][][3678 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 09:43:12][350635582192521][0 ms][INFO] === Request start === [2025-09-07 09:43:12][350635582192521][1 ms][DEBUG] START check_scloud [2025-09-07 09:43:12][350635582192521][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:43:13][350635582192521][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 8865 4973 25065012 154264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:43:13][350635582192521][299 ms][DEBUG] targetPkg: running [2025-09-07 09:43:13][350635582192521][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 09:43:13][350635582192521][299 ms][DEBUG] START check_boot_completed [2025-09-07 09:43:13][350635582192521][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:43:13][350635582192521][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:43:13][350635582192521][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:43:13][350635582192521][395 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 09:43:13][350635582192521][395 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 09:43:13][350635582192521][395 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:43:13][350635582192521][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635582192521\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ECT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1707\"}'\'' -e'"" [2025-09-07 09:43:13][350635582192521][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:43:13][350635582192521][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635582192521\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ECT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1707\"}'\'' -e'"" [2025-09-07 09:43:17][350635582192521][4751 ms][DEBUG] proc_open done in 4356 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-07 09:43:17][350635582192521][4751 ms][DEBUG] END runCmdUntilRes#1 in 4356 ms [2025-09-07 09:43:17][350635582192521][4751 ms][WARN] Detected error: Process with pid 8865 either refused to load frida-agent, or terminated during injectionProcess with pid 8865 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 09:43:17][350635582192521][4751 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 09:43:17][350635582192521][5017 ms][DEBUG] SU: done in 266 ms; outsystem 5395 4973 13263356 258684 ep_poll 0 S system_server\n [2025-09-07 09:43:17][350635582192521][5017 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 09:43:18][350635582192521][5157 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 09:43:18][350635582192521][5157 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 09:43:18][350635582192521][5158 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 09:43:18][350635582192521][5282 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 09:43:18][350635582192521][5283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 09:43:18][350635582192521][5454 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 09:43:20][350635582192521][7469 ms][DEBUG] START check_boot_completed [2025-09-07 09:43:20][350635582192521][7469 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:43:20][350635582192521][7516 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:43:20][350635582192521][7516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:43:20][350635582192521][7563 ms][DEBUG] SU: done in 46 ms; out [2025-09-07 09:43:20][350635582192521][7563 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:43:23][350635582192521][10578 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 09:43:23][350635582192521][10578 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635582192521\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ECT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1707\"}'\'' -e'"" [2025-09-07 09:43:28][350635582192521][15827 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7da859bf-9ae9-42ce-a70e-fcca4104f5a4","id":"QR_7da859bf-9ae9-42ce-a70e-fcca4104f5a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:43:28][350635582192521][15983 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-09-07 09:43:28][350635582192521][15983 ms][DEBUG] END runCmdUntilRes#2 in 5405 ms [2025-09-07 09:43:28][350635582192521][15983 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:46:03][352060486686049][1 ms][INFO] === Request start === [2025-09-07 09:46:03][352060486686049][1 ms][DEBUG] START check_scloud [2025-09-07 09:46:03][352060486686049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:46:03][352060486686049][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18425 4973 23746344 127240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:46:03][352060486686049][299 ms][DEBUG] targetPkg: running [2025-09-07 09:46:03][352060486686049][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-07 09:46:03][352060486686049][299 ms][DEBUG] START check_boot_completed [2025-09-07 09:46:03][352060486686049][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:46:03][352060486686049][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:46:03][352060486686049][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:46:04][352060486686049][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:46:04][352060486686049][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:46:04][352060486686049][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:46:04][352060486686049][504 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1684\nsuccessfulTxPacketsPerSecond: 0.9723397547579936\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.2721223887036023\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1653\nsuccessfulRxPacketsPerSecond: 0.8064114689631141\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:46:04][352060486686049][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:46:05][352060486686049][1908 ms][DEBUG] SU: done in 1404 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.141/301.141/301.141/0.000 ms\n [2025-09-07 09:46:05][352060486686049][1908 ms][DEBUG] check_internet: online [2025-09-07 09:46:05][352060486686049][1908 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:46:05][352060486686049][1908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486686049\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1364\"}'\'' -e'"" [2025-09-07 09:46:05][352060486686049][1909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:46:05][352060486686049][1909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486686049\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1364\"}'\'' -e'"" [2025-09-07 09:46:09][352060486686049][5501 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c52dafa8-203b-4c03-a244-5ee514f5f919","id":"QR_c52dafa8-203b-4c03-a244-5ee514f5f919","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:46:09][352060486686049][5657 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-09-07 09:46:09][352060486686049][5657 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-09-07 09:46:09][352060486686049][5657 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:46:11][352060486686049][0 ms][INFO] === Request start === [2025-09-07 09:46:11][352060486686049][0 ms][DEBUG] START check_scloud [2025-09-07 09:46:11][352060486686049][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:46:11][352060486686049][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 18425 4973 23880752 137880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:46:11][352060486686049][308 ms][DEBUG] targetPkg: running [2025-09-07 09:46:11][352060486686049][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 09:46:11][352060486686049][308 ms][DEBUG] START check_boot_completed [2025-09-07 09:46:11][352060486686049][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:46:11][352060486686049][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:46:11][352060486686049][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:46:12][352060486686049][402 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:46:12][352060486686049][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:46:12][352060486686049][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:46:12][352060486686049][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1720\nsuccessfulTxPacketsPerSecond: 0.2767953252345072\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.0691988313086268\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1684\nsuccessfulRxPacketsPerSecond: 0.23835153006304782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:46:12][352060486686049][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:46:12][352060486686049][995 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.447/346.447/346.447/0.000 ms\n [2025-09-07 09:46:12][352060486686049][996 ms][DEBUG] check_internet: online [2025-09-07 09:46:12][352060486686049][996 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:46:12][352060486686049][996 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486686049\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7838\"}'\'' -e'"" [2025-09-07 09:46:12][352060486686049][996 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:46:12][352060486686049][996 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486686049\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7838\"}'\'' -e'"" [2025-09-07 09:46:17][352060486686049][6025 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2670efc-74b5-477d-a6cc-c904b408cdc6","id":"QR_a2670efc-74b5-477d-a6cc-c904b408cdc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:46:17][352060486686049][6182 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 09:46:17][352060486686049][6182 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 09:46:17][352060486686049][6182 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:46:22][351270415443963][0 ms][INFO] === Request start === [2025-09-07 09:46:22][351270415443963][1 ms][DEBUG] START check_scloud [2025-09-07 09:46:22][351270415443963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:46:22][351270415443963][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 18425 4973 24047992 149588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:46:22][351270415443963][263 ms][DEBUG] targetPkg: running [2025-09-07 09:46:22][351270415443963][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 09:46:22][351270415443963][263 ms][DEBUG] START check_boot_completed [2025-09-07 09:46:22][351270415443963][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:46:22][351270415443963][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:46:22][351270415443963][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:46:22][351270415443963][372 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:46:22][351270415443963][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:46:22][351270415443963][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:46:22][351270415443963][481 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1720\nsuccessfulTxPacketsPerSecond: 0.2767953252345072\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.0691988313086268\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1684\nsuccessfulRxPacketsPerSecond: 0.23835153006304782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:46:22][351270415443963][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:46:22][351270415443963][919 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.598/341.598/341.598/0.000 ms\n [2025-09-07 09:46:22][351270415443963][919 ms][DEBUG] check_internet: online [2025-09-07 09:46:22][351270415443963][919 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:46:22][351270415443963][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415443963\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5284\"}'\'' -e'"" [2025-09-07 09:46:22][351270415443963][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:46:22][351270415443963][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415443963\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5284\"}'\'' -e'"" [2025-09-07 09:46:26][351270415443963][4324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0c3d557-f543-4065-bbd9-6c738903965b","id":"QR_c0c3d557-f543-4065-bbd9-6c738903965b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:46:26][351270415443963][4480 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-07 09:46:26][351270415443963][4480 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-07 09:46:26][351270415443963][4480 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:46:28][351270415443963][0 ms][INFO] === Request start === [2025-09-07 09:46:28][351270415443963][1 ms][DEBUG] START check_scloud [2025-09-07 09:46:28][351270415443963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:46:29][351270415443963][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 18425 4973 24196572 160664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:46:29][351270415443963][253 ms][DEBUG] targetPkg: running [2025-09-07 09:46:29][351270415443963][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-07 09:46:29][351270415443963][253 ms][DEBUG] START check_boot_completed [2025-09-07 09:46:29][351270415443963][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:46:29][351270415443963][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:46:29][351270415443963][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:46:29][351270415443963][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:46:29][351270415443963][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:46:29][351270415443963][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:46:29][351270415443963][456 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1720\nsuccessfulTxPacketsPerSecond: 0.2767953252345072\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.0691988313086268\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1684\nsuccessfulRxPacketsPerSecond: 0.23835153006304782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:46:29][351270415443963][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:46:29][351270415443963][784 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.482/226.482/226.482/0.000 ms\n [2025-09-07 09:46:29][351270415443963][784 ms][DEBUG] check_internet: online [2025-09-07 09:46:29][351270415443963][784 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:46:29][351270415443963][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415443963\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9385\"}'\'' -e'"" [2025-09-07 09:46:29][351270415443963][784 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:46:29][351270415443963][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415443963\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9385\"}'\'' -e'"" [2025-09-07 09:46:34][351270415443963][5720 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdc36861-20a4-4976-a41f-c7782cf64c6b","id":"QR_cdc36861-20a4-4976-a41f-c7782cf64c6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:46:34][351270415443963][5876 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 09:46:34][351270415443963][5876 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 09:46:34][351270415443963][5876 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:47:06][351877472321625][0 ms][INFO] === Request start === [2025-09-07 09:47:06][351877472321625][1 ms][DEBUG] START check_scloud [2025-09-07 09:47:06][351877472321625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:47:06][351877472321625][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18425 4973 24287736 172196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:47:06][351877472321625][317 ms][DEBUG] targetPkg: running [2025-09-07 09:47:06][351877472321625][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 09:47:06][351877472321625][317 ms][DEBUG] START check_boot_completed [2025-09-07 09:47:06][351877472321625][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:47:06][351877472321625][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:47:06][351877472321625][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:47:07][351877472321625][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:47:07][351877472321625][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:47:07][351877472321625][426 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:47:07][351877472321625][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472321625\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5348\"}'\'' -e'"" [2025-09-07 09:47:07][351877472321625][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:47:07][351877472321625][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472321625\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5348\"}'\'' -e'"" [2025-09-07 09:47:11][351877472321625][4628 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4c547ec-27d1-4e4f-b865-6d648952255d","id":"QR_f4c547ec-27d1-4e4f-b865-6d648952255d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:47:11][351877472321625][4784 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-09-07 09:47:11][351877472321625][4785 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-09-07 09:47:11][351877472321625][4785 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:47:15][352384579116320][0 ms][INFO] === Request start === [2025-09-07 09:47:15][352384579116320][1 ms][DEBUG] START check_scloud [2025-09-07 09:47:15][352384579116320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:47:16][352384579116320][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 18425 4973 24436288 182984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:47:16][352384579116320][294 ms][DEBUG] targetPkg: running [2025-09-07 09:47:16][352384579116320][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 09:47:16][352384579116320][294 ms][DEBUG] START check_boot_completed [2025-09-07 09:47:16][352384579116320][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:47:16][352384579116320][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:47:16][352384579116320][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:47:16][352384579116320][388 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:47:16][352384579116320][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:47:16][352384579116320][388 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:47:16][352384579116320][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384579116320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7615\"}'\'' -e'"" [2025-09-07 09:47:16][352384579116320][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:47:16][352384579116320][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384579116320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7615\"}'\'' -e'"" [2025-09-07 09:47:21][352384579116320][5386 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c07679fb-ca57-41f5-9adc-a27afea48605","id":"QR_c07679fb-ca57-41f5-9adc-a27afea48605","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:47:21][352384579116320][5542 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-07 09:47:21][352384579116320][5543 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-07 09:47:21][352384579116320][5543 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:47:23][352384579116320][0 ms][INFO] === Request start === [2025-09-07 09:47:23][352384579116320][1 ms][DEBUG] START check_scloud [2025-09-07 09:47:23][352384579116320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:47:24][352384579116320][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18425 4973 24568584 194892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:47:24][352384579116320][317 ms][DEBUG] targetPkg: running [2025-09-07 09:47:24][352384579116320][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 09:47:24][352384579116320][317 ms][DEBUG] START check_boot_completed [2025-09-07 09:47:24][352384579116320][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:47:24][352384579116320][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:47:24][352384579116320][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:47:24][352384579116320][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:47:24][352384579116320][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:47:24][352384579116320][410 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:47:24][352384579116320][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384579116320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1002\"}'\'' -e'"" [2025-09-07 09:47:24][352384579116320][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:47:24][352384579116320][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384579116320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1002\"}'\'' -e'"" [2025-09-07 09:47:29][352384579116320][5534 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f039112-443c-4e15-b1ae-f0d00147911e","id":"QR_5f039112-443c-4e15-b1ae-f0d00147911e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:47:29][352384579116320][5690 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-07 09:47:29][352384579116320][5690 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-07 09:47:29][352384579116320][5690 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:48:03][350857485826381][0 ms][INFO] === Request start === [2025-09-07 09:48:03][350857485826381][1 ms][DEBUG] START check_scloud [2025-09-07 09:48:03][350857485826381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:48:04][350857485826381][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 18425 4973 24647396 206580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:48:04][350857485826381][312 ms][DEBUG] targetPkg: running [2025-09-07 09:48:04][350857485826381][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 09:48:04][350857485826381][312 ms][DEBUG] START check_boot_completed [2025-09-07 09:48:04][350857485826381][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:48:04][350857485826381][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:48:04][350857485826381][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:48:04][350857485826381][391 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 09:48:04][350857485826381][391 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 09:48:04][350857485826381][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:48:04][350857485826381][515 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1720\nsuccessfulTxPacketsPerSecond: 0.2767953252345072\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.0691988313086268\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1684\nsuccessfulRxPacketsPerSecond: 0.23835153006304782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:48:04][350857485826381][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:48:04][350857485826381][922 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.837/304.837/304.837/0.000 ms\n [2025-09-07 09:48:04][350857485826381][922 ms][DEBUG] check_internet: online [2025-09-07 09:48:04][350857485826381][922 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:48:04][350857485826381][922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857485826381\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2102\"}'\'' -e'"" [2025-09-07 09:48:04][350857485826381][922 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:48:04][350857485826381][922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857485826381\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2102\"}'\'' -e'"" [2025-09-07 09:48:08][350857485826381][4467 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d459df85-54be-4040-acf4-836a9eaffde9","id":"QR_d459df85-54be-4040-acf4-836a9eaffde9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:48:08][350857485826381][4623 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-09-07 09:48:08][350857485826381][4623 ms][DEBUG] END runCmdUntilRes#1 in 3701 ms [2025-09-07 09:48:08][350857485826381][4623 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:48:10][350857485826381][1 ms][INFO] === Request start === [2025-09-07 09:48:10][350857485826381][1 ms][DEBUG] START check_scloud [2025-09-07 09:48:10][350857485826381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:48:11][350857485826381][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 18425 4973 24803820 216716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:48:11][350857485826381][289 ms][DEBUG] targetPkg: running [2025-09-07 09:48:11][350857485826381][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 09:48:11][350857485826381][289 ms][DEBUG] START check_boot_completed [2025-09-07 09:48:11][350857485826381][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:48:11][350857485826381][336 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:48:11][350857485826381][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:48:11][350857485826381][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:48:11][350857485826381][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:48:11][350857485826381][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:48:11][350857485826381][492 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1720\nsuccessfulTxPacketsPerSecond: 0.2767953252345072\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.0691988313086268\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1684\nsuccessfulRxPacketsPerSecond: 0.23835153006304782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:48:11][350857485826381][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:48:11][350857485826381][867 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.836/257.836/257.836/0.000 ms\n [2025-09-07 09:48:11][350857485826381][867 ms][DEBUG] check_internet: online [2025-09-07 09:48:11][350857485826381][867 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:48:11][350857485826381][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857485826381\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3613\"}'\'' -e'"" [2025-09-07 09:48:11][350857485826381][867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:48:11][350857485826381][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857485826381\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3613\"}'\'' -e'"" [2025-09-07 09:48:16][350857485826381][5709 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8947e021-500d-4387-83ca-ad8d476a450c","id":"QR_8947e021-500d-4387-83ca-ad8d476a450c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:48:16][350857485826381][5865 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-07 09:48:16][350857485826381][5866 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-07 09:48:16][350857485826381][5866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:48:21][355490893072250][0 ms][INFO] === Request start === [2025-09-07 09:48:21][355490893072250][1 ms][DEBUG] START check_scloud [2025-09-07 09:48:21][355490893072250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:48:21][355490893072250][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 18425 4973 24929908 228496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:48:21][355490893072250][310 ms][DEBUG] targetPkg: running [2025-09-07 09:48:21][355490893072250][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 09:48:21][355490893072250][310 ms][DEBUG] START check_boot_completed [2025-09-07 09:48:21][355490893072250][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:48:21][355490893072250][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:48:21][355490893072250][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:48:21][355490893072250][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:48:21][355490893072250][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:48:21][355490893072250][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:48:21][355490893072250][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1720\nsuccessfulTxPacketsPerSecond: 0.2767953252345072\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.0691988313086268\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1684\nsuccessfulRxPacketsPerSecond: 0.23835153006304782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:48:21][355490893072250][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:48:22][355490893072250][919 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.460/316.460/316.460/0.000 ms\n [2025-09-07 09:48:22][355490893072250][919 ms][DEBUG] check_internet: online [2025-09-07 09:48:22][355490893072250][919 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:48:22][355490893072250][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490893072250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8143\"}'\'' -e'"" [2025-09-07 09:48:22][355490893072250][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:48:22][355490893072250][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490893072250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8143\"}'\'' -e'"" [2025-09-07 09:48:26][355490893072250][5277 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3adbbc4d-d92d-4fe2-8240-b1ed47f11f08","id":"QR_3adbbc4d-d92d-4fe2-8240-b1ed47f11f08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:48:26][355490893072250][5434 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-07 09:48:26][355490893072250][5434 ms][DEBUG] END runCmdUntilRes#1 in 4515 ms [2025-09-07 09:48:26][355490893072250][5434 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:48:28][355490893072250][0 ms][INFO] === Request start === [2025-09-07 09:48:28][355490893072250][1 ms][DEBUG] START check_scloud [2025-09-07 09:48:28][355490893072250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:48:29][355490893072250][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18425 4973 25041628 240208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:48:29][355490893072250][307 ms][DEBUG] targetPkg: running [2025-09-07 09:48:29][355490893072250][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 09:48:29][355490893072250][307 ms][DEBUG] START check_boot_completed [2025-09-07 09:48:29][355490893072250][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:48:29][355490893072250][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 09:48:29][355490893072250][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:48:29][355490893072250][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:48:29][355490893072250][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 09:48:29][355490893072250][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:48:29][355490893072250][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1720\nsuccessfulTxPacketsPerSecond: 0.2767953252345072\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.0691988313086268\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1684\nsuccessfulRxPacketsPerSecond: 0.23835153006304782\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:48:29][355490893072250][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:48:29][355490893072250][853 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.436/229.436/229.436/0.000 ms\n [2025-09-07 09:48:29][355490893072250][854 ms][DEBUG] check_internet: online [2025-09-07 09:48:29][355490893072250][854 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:48:29][355490893072250][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490893072250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-09-07 09:48:29][355490893072250][854 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:48:29][355490893072250][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490893072250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-09-07 09:48:33][355490893072250][4884 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 09:48:33][355490893072250][4884 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-07 09:48:33][355490893072250][4884 ms][WARN] Detected error: Process with pid 18425 either refused to load frida-agent, or terminated during injectionProcess with pid 18425 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 09:48:33][355490893072250][4884 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 09:48:34][355490893072250][5149 ms][DEBUG] SU: done in 265 ms; outsystem 5395 4973 13069048 245568 ep_poll 0 S system_server\n [2025-09-07 09:48:34][355490893072250][5149 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 09:48:34][355490893072250][5290 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 09:48:34][355490893072250][5290 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 09:48:34][355490893072250][5290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 09:48:34][355490893072250][5415 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 09:48:34][355490893072250][5415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 09:48:34][355490893072250][5586 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 09:48:36][355490893072250][7602 ms][DEBUG] START check_boot_completed [2025-09-07 09:48:36][355490893072250][7602 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:48:36][355490893072250][7649 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:48:36][355490893072250][7649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:48:36][355490893072250][7695 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:48:36][355490893072250][7696 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:48:39][355490893072250][10710 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 09:48:39][355490893072250][10710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490893072250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-09-07 09:48:44][355490893072250][15928 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4c3099c-4f3b-4e4e-b186-a6ff9f395db7","id":"QR_d4c3099c-4f3b-4e4e-b186-a6ff9f395db7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:48:44][355490893072250][16084 ms][DEBUG] proc_open done in 5374 ms; code=255; res.len=3343 [2025-09-07 09:48:44][355490893072250][16084 ms][DEBUG] END runCmdUntilRes#2 in 5374 ms [2025-09-07 09:48:44][355490893072250][16084 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:51:04][350536255732793][1 ms][INFO] === Request start === [2025-09-07 09:51:04][350536255732793][1 ms][DEBUG] START check_scloud [2025-09-07 09:51:04][350536255732793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:51:04][350536255732793][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 20044 4973 23699340 127304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:51:04][350536255732793][292 ms][DEBUG] targetPkg: running [2025-09-07 09:51:04][350536255732793][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-07 09:51:04][350536255732793][292 ms][DEBUG] START check_boot_completed [2025-09-07 09:51:04][350536255732793][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:51:04][350536255732793][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:51:04][350536255732793][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:51:04][350536255732793][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:51:04][350536255732793][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 09:51:04][350536255732793][370 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:51:04][350536255732793][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255732793\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2988\"}'\'' -e'"" [2025-09-07 09:51:04][350536255732793][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:51:04][350536255732793][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255732793\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2988\"}'\'' -e'"" [2025-09-07 09:51:08][350536255732793][4900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_908f3c68-3565-4d28-943a-8d75f2539d13","id":"QR_908f3c68-3565-4d28-943a-8d75f2539d13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:51:09][350536255732793][5057 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-07 09:51:09][350536255732793][5057 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-07 09:51:09][350536255732793][5057 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:51:11][350536255732793][0 ms][INFO] === Request start === [2025-09-07 09:51:11][350536255732793][1 ms][DEBUG] START check_scloud [2025-09-07 09:51:11][350536255732793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:51:11][350536255732793][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 20044 4973 23862100 137824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:51:11][350536255732793][287 ms][DEBUG] targetPkg: running [2025-09-07 09:51:11][350536255732793][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 09:51:11][350536255732793][287 ms][DEBUG] START check_boot_completed [2025-09-07 09:51:11][350536255732793][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:51:11][350536255732793][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:51:11][350536255732793][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:51:11][350536255732793][381 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 09:51:11][350536255732793][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 09:51:11][350536255732793][381 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:51:11][350536255732793][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255732793\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6431\"}'\'' -e'"" [2025-09-07 09:51:11][350536255732793][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:51:11][350536255732793][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255732793\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6431\"}'\'' -e'"" [2025-09-07 09:51:16][350536255732793][5473 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80dd3266-c93f-40ea-a03f-9a6d20286431","id":"QR_80dd3266-c93f-40ea-a03f-9a6d20286431","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:51:17][350536255732793][5630 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-07 09:51:17][350536255732793][5630 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-07 09:51:17][350536255732793][5630 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:54:03][353310801908480][1 ms][INFO] === Request start === [2025-09-07 09:54:03][353310801908480][1 ms][DEBUG] START check_scloud [2025-09-07 09:54:03][353310801908480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:54:03][353310801908480][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 20044 4973 24028144 149536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:54:03][353310801908480][260 ms][DEBUG] targetPkg: running [2025-09-07 09:54:03][353310801908480][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-07 09:54:03][353310801908480][260 ms][DEBUG] START check_boot_completed [2025-09-07 09:54:03][353310801908480][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:54:03][353310801908480][291 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 09:54:03][353310801908480][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:54:03][353310801908480][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 09:54:03][353310801908480][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 09:54:03][353310801908480][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:54:03][353310801908480][449 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2014\nsuccessfulTxPacketsPerSecond: 0.9751631905747492\nretriedTxPackets: 421\nretriedTxPacketsPerSecond: 0.2852518176511171\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1934\nsuccessfulRxPacketsPerSecond: 0.8292204001485963\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:54:03][353310801908480][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:54:05][353310801908480][2057 ms][DEBUG] SU: done in 1608 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=404 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 404.370/404.370/404.370/0.000 ms\n [2025-09-07 09:54:05][353310801908480][2057 ms][DEBUG] check_internet: online [2025-09-07 09:54:05][353310801908480][2057 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:54:05][353310801908480][2057 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801908480\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1422\"}'\'' -e'"" [2025-09-07 09:54:05][353310801908480][2057 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:54:05][353310801908480][2057 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801908480\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1422\"}'\'' -e'"" [2025-09-07 09:54:09][353310801908480][6056 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6aa741c-2b11-4a41-a955-bc5c48badaed","id":"QR_e6aa741c-2b11-4a41-a955-bc5c48badaed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:54:09][353310801908480][6212 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-07 09:54:09][353310801908480][6212 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-07 09:54:09][353310801908480][6212 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:54:12][353310801908480][0 ms][INFO] === Request start === [2025-09-07 09:54:12][353310801908480][1 ms][DEBUG] START check_scloud [2025-09-07 09:54:12][353310801908480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:54:12][353310801908480][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 20044 4973 24179832 161012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:54:12][353310801908480][263 ms][DEBUG] targetPkg: running [2025-09-07 09:54:12][353310801908480][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-07 09:54:12][353310801908480][263 ms][DEBUG] START check_boot_completed [2025-09-07 09:54:12][353310801908480][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:54:12][353310801908480][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:54:12][353310801908480][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:54:12][353310801908480][373 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:54:12][353310801908480][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:54:12][353310801908480][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 09:54:12][353310801908480][497 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2014\nsuccessfulTxPacketsPerSecond: 0.9751631905747492\nretriedTxPackets: 421\nretriedTxPacketsPerSecond: 0.2852518176511171\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1934\nsuccessfulRxPacketsPerSecond: 0.8292204001485963\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 09:54:12][353310801908480][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 09:54:13][353310801908480][919 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.407/318.407/318.407/0.000 ms\n [2025-09-07 09:54:13][353310801908480][919 ms][DEBUG] check_internet: online [2025-09-07 09:54:13][353310801908480][919 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:54:13][353310801908480][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801908480\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3742\"}'\'' -e'"" [2025-09-07 09:54:13][353310801908480][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:54:13][353310801908480][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801908480\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3742\"}'\'' -e'"" [2025-09-07 09:54:18][353310801908480][6277 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c68f473c-3865-4667-9722-a755f68ef4e8","id":"QR_c68f473c-3865-4667-9722-a755f68ef4e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:54:18][353310801908480][6433 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 09:54:18][353310801908480][6433 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 09:54:18][353310801908480][6434 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:55:03][356019742792997][0 ms][INFO] === Request start === [2025-09-07 09:55:03][356019742792997][1 ms][DEBUG] START check_scloud [2025-09-07 09:55:03][356019742792997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:55:03][356019742792997][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 20044 4973 24291640 172276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:55:03][356019742792997][317 ms][DEBUG] targetPkg: running [2025-09-07 09:55:03][356019742792997][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 09:55:03][356019742792997][318 ms][DEBUG] START check_boot_completed [2025-09-07 09:55:03][356019742792997][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:55:03][356019742792997][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:55:03][356019742792997][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:55:03][356019742792997][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:55:03][356019742792997][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:55:03][356019742792997][427 ms][DEBUG] rawBody.length=1150 [2025-09-07 09:55:03][356019742792997][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742792997\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4809\"}'\'' -e'"" [2025-09-07 09:55:03][356019742792997][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:55:03][356019742792997][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742792997\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4809\"}'\'' -e'"" [2025-09-07 09:55:07][356019742792997][3941 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c3f17e7-9c2d-44b0-96b1-74861ec0701a","id":"QR_4c3f17e7-9c2d-44b0-96b1-74861ec0701a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:55:07][356019742792997][4098 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-09-07 09:55:07][356019742792997][4098 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-07 09:55:07][356019742792997][4098 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 09:55:09][356019742792997][0 ms][INFO] === Request start === [2025-09-07 09:55:09][356019742792997][1 ms][DEBUG] START check_scloud [2025-09-07 09:55:09][356019742792997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 09:55:09][356019742792997][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 20044 4973 24473152 184096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 09:55:09][356019742792997][312 ms][DEBUG] targetPkg: running [2025-09-07 09:55:09][356019742792997][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 09:55:09][356019742792997][312 ms][DEBUG] START check_boot_completed [2025-09-07 09:55:09][356019742792997][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 09:55:10][356019742792997][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 09:55:10][356019742792997][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 09:55:10][356019742792997][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 09:55:10][356019742792997][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 09:55:10][356019742792997][422 ms][DEBUG] rawBody.length=1160 [2025-09-07 09:55:10][356019742792997][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742792997\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6686\"}'\'' -e'"" [2025-09-07 09:55:10][356019742792997][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 09:55:10][356019742792997][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742792997\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6686\"}'\'' -e'"" [2025-09-07 09:55:14][356019742792997][5077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b80f6663-cdc5-4072-be02-f6a5bf067038","id":"QR_b80f6663-cdc5-4072-be02-f6a5bf067038","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 09:55:14][356019742792997][5233 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 09:55:14][356019742792997][5233 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 09:55:14][356019742792997][5233 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:01:03][350178738920198][1 ms][INFO] === Request start === [2025-09-07 10:01:03][350178738920198][1 ms][DEBUG] START check_scloud [2025-09-07 10:01:03][350178738920198][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:01:03][350178738920198][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 20044 4973 24564352 195408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:01:03][350178738920198][294 ms][DEBUG] targetPkg: running [2025-09-07 10:01:03][350178738920198][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 10:01:03][350178738920198][294 ms][DEBUG] START check_boot_completed [2025-09-07 10:01:03][350178738920198][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:01:03][350178738920198][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:01:03][350178738920198][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:01:04][350178738920198][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:01:04][350178738920198][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:01:04][350178738920198][372 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:01:04][350178738920198][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738920198\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9448\"}'\'' -e'"" [2025-09-07 10:01:04][350178738920198][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:01:04][350178738920198][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738920198\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9448\"}'\'' -e'"" [2025-09-07 10:01:08][350178738920198][5137 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dd0c5e6-2ca7-4565-8ed9-a69261929e63","id":"QR_8dd0c5e6-2ca7-4565-8ed9-a69261929e63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:01:08][350178738920198][5293 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-07 10:01:08][350178738920198][5293 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-07 10:01:08][350178738920198][5293 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:01:11][350178738920198][0 ms][INFO] === Request start === [2025-09-07 10:01:11][350178738920198][1 ms][DEBUG] START check_scloud [2025-09-07 10:01:11][350178738920198][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:01:11][350178738920198][261 ms][DEBUG] SU: done in 261 ms; outu0_a118 20044 4973 24696712 207508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:01:11][350178738920198][262 ms][DEBUG] targetPkg: running [2025-09-07 10:01:11][350178738920198][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-07 10:01:11][350178738920198][262 ms][DEBUG] START check_boot_completed [2025-09-07 10:01:11][350178738920198][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:01:11][350178738920198][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:01:11][350178738920198][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:01:11][350178738920198][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:01:11][350178738920198][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 10:01:11][350178738920198][355 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:01:11][350178738920198][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738920198\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2267\"}'\'' -e'"" [2025-09-07 10:01:11][350178738920198][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:01:11][350178738920198][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178738920198\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2267\"}'\'' -e'"" [2025-09-07 10:01:16][350178738920198][5494 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0facef45-eb17-4fb5-bf09-76254e56d026","id":"QR_0facef45-eb17-4fb5-bf09-76254e56d026","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:01:16][350178738920198][5650 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 10:01:16][350178738920198][5650 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-07 10:01:16][350178738920198][5650 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:01:21][351240643896811][0 ms][INFO] === Request start === [2025-09-07 10:01:21][351240643896811][1 ms][DEBUG] START check_scloud [2025-09-07 10:01:21][351240643896811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:01:21][351240643896811][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 20044 4973 24867984 217536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:01:21][351240643896811][300 ms][DEBUG] targetPkg: running [2025-09-07 10:01:21][351240643896811][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 10:01:21][351240643896811][301 ms][DEBUG] START check_boot_completed [2025-09-07 10:01:21][351240643896811][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:01:21][351240643896811][346 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 10:01:21][351240643896811][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:01:21][351240643896811][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:01:21][351240643896811][392 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 10:01:21][351240643896811][392 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:01:21][351240643896811][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643896811\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8808\"}'\'' -e'"" [2025-09-07 10:01:21][351240643896811][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:01:21][351240643896811][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643896811\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8808\"}'\'' -e'"" [2025-09-07 10:01:24][351240643896811][3735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aabb96a-41bc-48af-b1df-2e8018074baf","id":"QR_2aabb96a-41bc-48af-b1df-2e8018074baf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:01:25][351240643896811][3891 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-07 10:01:25][351240643896811][3891 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-07 10:01:25][351240643896811][3892 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:01:27][351240643896811][0 ms][INFO] === Request start === [2025-09-07 10:01:27][351240643896811][1 ms][DEBUG] START check_scloud [2025-09-07 10:01:27][351240643896811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:01:27][351240643896811][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 20044 4973 24992116 229572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:01:27][351240643896811][288 ms][DEBUG] targetPkg: running [2025-09-07 10:01:27][351240643896811][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 10:01:27][351240643896811][288 ms][DEBUG] START check_boot_completed [2025-09-07 10:01:27][351240643896811][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:01:27][351240643896811][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:01:27][351240643896811][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:01:27][351240643896811][382 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:01:27][351240643896811][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 10:01:27][351240643896811][382 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:01:27][351240643896811][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643896811\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2830\"}'\'' -e'"" [2025-09-07 10:01:27][351240643896811][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:01:27][351240643896811][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643896811\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2830\"}'\'' -e'"" [2025-09-07 10:01:32][351240643896811][5178 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b04d88db-daec-43cf-bb4b-0ec291659010","id":"QR_b04d88db-daec-43cf-bb4b-0ec291659010","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:01:32][351240643896811][5334 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-07 10:01:32][351240643896811][5334 ms][DEBUG] END runCmdUntilRes#1 in 4951 ms [2025-09-07 10:01:32][351240643896811][5334 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:02:04][359013100122464][0 ms][INFO] === Request start === [2025-09-07 10:02:04][359013100122464][1 ms][DEBUG] START check_scloud [2025-09-07 10:02:04][359013100122464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:02:04][359013100122464][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20044 4973 25075088 241016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:02:04][359013100122464][310 ms][DEBUG] targetPkg: running [2025-09-07 10:02:04][359013100122464][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 10:02:04][359013100122464][310 ms][DEBUG] START check_boot_completed [2025-09-07 10:02:04][359013100122464][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:02:04][359013100122464][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:02:04][359013100122464][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:02:04][359013100122464][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:02:04][359013100122464][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:02:04][359013100122464][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:02:04][359013100122464][544 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2174\nsuccessfulTxPacketsPerSecond: 0.29155552683453045\nretriedTxPackets: 473\nretriedTxPacketsPerSecond: 0.24990265469435988\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2075\nsuccessfulRxPacketsPerSecond: 0.24989901015769392\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:02:04][359013100122464][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:02:06][359013100122464][1919 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.991/290.991/290.991/0.000 ms\n [2025-09-07 10:02:06][359013100122464][1919 ms][DEBUG] check_internet: online [2025-09-07 10:02:06][359013100122464][1919 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:02:06][359013100122464][1919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359013100122464\",\"model\":\"SM-N970F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8976\"}'\'' -e'"" [2025-09-07 10:02:06][359013100122464][1919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:02:06][359013100122464][1919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359013100122464\",\"model\":\"SM-N970F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8976\"}'\'' -e'"" [2025-09-07 10:02:10][359013100122464][5668 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 10:02:10][359013100122464][5668 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-07 10:02:10][359013100122464][5668 ms][WARN] Detected error: Process with pid 20044 either refused to load frida-agent, or terminated during injectionProcess with pid 20044 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 10:02:10][359013100122464][5668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 10:02:10][359013100122464][5965 ms][DEBUG] SU: done in 296 ms; outsystem 5395 4973 13086484 208052 ep_poll 0 S system_server\n [2025-09-07 10:02:10][359013100122464][5965 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 10:02:10][359013100122464][6105 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 10:02:10][359013100122464][6105 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 10:02:10][359013100122464][6105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 10:02:10][359013100122464][6230 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 10:02:10][359013100122464][6230 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 10:02:10][359013100122464][6386 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 10:02:12][359013100122464][8401 ms][DEBUG] START check_boot_completed [2025-09-07 10:02:12][359013100122464][8401 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:02:12][359013100122464][8448 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:02:12][359013100122464][8448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:02:12][359013100122464][8495 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:02:12][359013100122464][8495 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 10:02:15][359013100122464][11510 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 10:02:15][359013100122464][11510 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359013100122464\",\"model\":\"SM-N970F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8976\"}'\'' -e'"" [2025-09-07 10:02:20][359013100122464][16571 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37b8e97b-a537-48a6-8665-8bd31bb8ac5f","id":"QR_37b8e97b-a537-48a6-8665-8bd31bb8ac5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:02:21][359013100122464][16727 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 10:02:21][359013100122464][16728 ms][DEBUG] END runCmdUntilRes#2 in 5218 ms [2025-09-07 10:02:21][359013100122464][16728 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:02:24][359013100122464][0 ms][INFO] === Request start === [2025-09-07 10:02:24][359013100122464][1 ms][DEBUG] START check_scloud [2025-09-07 10:02:24][359013100122464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:02:24][359013100122464][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 21472 4973 23756028 123772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:02:24][359013100122464][278 ms][DEBUG] targetPkg: running [2025-09-07 10:02:24][359013100122464][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-07 10:02:24][359013100122464][278 ms][DEBUG] START check_boot_completed [2025-09-07 10:02:24][359013100122464][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:02:24][359013100122464][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:02:24][359013100122464][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:02:24][359013100122464][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:02:24][359013100122464][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:02:24][359013100122464][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:02:25][359013100122464][481 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2174\nsuccessfulTxPacketsPerSecond: 0.29155552683453045\nretriedTxPackets: 473\nretriedTxPacketsPerSecond: 0.24990265469435988\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2075\nsuccessfulRxPacketsPerSecond: 0.24989901015769392\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:02:25][359013100122464][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:02:25][359013100122464][934 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=334 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 334.530/334.530/334.530/0.000 ms\n [2025-09-07 10:02:25][359013100122464][934 ms][DEBUG] check_internet: online [2025-09-07 10:02:25][359013100122464][934 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:02:25][359013100122464][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359013100122464\",\"model\":\"SM-N970F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2094\"}'\'' -e'"" [2025-09-07 10:02:25][359013100122464][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:02:25][359013100122464][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359013100122464\",\"model\":\"SM-N970F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2094\"}'\'' -e'"" [2025-09-07 10:02:29][359013100122464][4589 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77274c28-c393-4b39-9e6e-6dc98b8b400d","id":"QR_77274c28-c393-4b39-9e6e-6dc98b8b400d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:02:29][359013100122464][4745 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-07 10:02:29][359013100122464][4745 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-07 10:02:29][359013100122464][4745 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:06:03][352288967969200][1 ms][INFO] === Request start === [2025-09-07 10:06:03][352288967969200][1 ms][DEBUG] START check_scloud [2025-09-07 10:06:03][352288967969200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:06:04][352288967969200][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 21472 4973 23849960 135664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:06:04][352288967969200][333 ms][DEBUG] targetPkg: running [2025-09-07 10:06:04][352288967969200][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-07 10:06:04][352288967969200][333 ms][DEBUG] START check_boot_completed [2025-09-07 10:06:04][352288967969200][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:06:04][352288967969200][364 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:06:04][352288967969200][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:06:04][352288967969200][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:06:04][352288967969200][411 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:06:04][352288967969200][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:06:04][352288967969200][521 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2334\nsuccessfulTxPacketsPerSecond: 0.5607954884002958\nretriedTxPackets: 528\nretriedTxPacketsPerSecond: 0.1927734491376017\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2207\nsuccessfulRxPacketsPerSecond: 0.46265627793024405\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:06:04][352288967969200][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:06:04][352288967969200][974 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.841/346.841/346.841/0.000 ms\n [2025-09-07 10:06:04][352288967969200][974 ms][DEBUG] check_internet: online [2025-09-07 10:06:04][352288967969200][974 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:06:04][352288967969200][974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967969200\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3150\"}'\'' -e'"" [2025-09-07 10:06:04][352288967969200][974 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:06:04][352288967969200][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967969200\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3150\"}'\'' -e'"" [2025-09-07 10:06:10][352288967969200][6644 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47e75a8f-6c2e-4685-b4cb-736943ce93c5","id":"QR_47e75a8f-6c2e-4685-b4cb-736943ce93c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:06:10][352288967969200][6800 ms][DEBUG] proc_open done in 5827 ms; code=255; res.len=3343 [2025-09-07 10:06:10][352288967969200][6800 ms][DEBUG] END runCmdUntilRes#1 in 5827 ms [2025-09-07 10:06:10][352288967969200][6800 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:06:12][352288967969200][0 ms][INFO] === Request start === [2025-09-07 10:06:12][352288967969200][1 ms][DEBUG] START check_scloud [2025-09-07 10:06:12][352288967969200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:06:13][352288967969200][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 21472 4973 24015984 114576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:06:13][352288967969200][316 ms][DEBUG] targetPkg: running [2025-09-07 10:06:13][352288967969200][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 10:06:13][352288967969200][316 ms][DEBUG] START check_boot_completed [2025-09-07 10:06:13][352288967969200][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:06:13][352288967969200][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:06:13][352288967969200][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:06:13][352288967969200][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:06:13][352288967969200][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 10:06:13][352288967969200][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:06:13][352288967969200][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2334\nsuccessfulTxPacketsPerSecond: 0.5607954884002958\nretriedTxPackets: 528\nretriedTxPacketsPerSecond: 0.1927734491376017\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2207\nsuccessfulRxPacketsPerSecond: 0.46265627793024405\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:06:13][352288967969200][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:06:13][352288967969200][940 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.570/313.570/313.570/0.000 ms\n [2025-09-07 10:06:13][352288967969200][940 ms][DEBUG] check_internet: online [2025-09-07 10:06:13][352288967969200][940 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:06:13][352288967969200][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967969200\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7233\"}'\'' -e'"" [2025-09-07 10:06:13][352288967969200][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:06:13][352288967969200][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967969200\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7233\"}'\'' -e'"" [2025-09-07 10:06:18][352288967969200][6095 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe743185-d7f1-43e2-aa00-e9b1c67e9b7f","id":"QR_fe743185-d7f1-43e2-aa00-e9b1c67e9b7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:06:19][352288967969200][6251 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-07 10:06:19][352288967969200][6251 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 10:06:19][352288967969200][6251 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:07:03][354255811347188][0 ms][INFO] === Request start === [2025-09-07 10:07:03][354255811347188][1 ms][DEBUG] START check_scloud [2025-09-07 10:07:03][354255811347188][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:07:03][354255811347188][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 21472 4973 24148208 131104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:07:03][354255811347188][310 ms][DEBUG] targetPkg: running [2025-09-07 10:07:03][354255811347188][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 10:07:03][354255811347188][310 ms][DEBUG] START check_boot_completed [2025-09-07 10:07:03][354255811347188][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:07:03][354255811347188][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:07:03][354255811347188][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:07:04][354255811347188][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:07:04][354255811347188][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:07:04][354255811347188][420 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:07:04][354255811347188][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811347188\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8882\"}'\'' -e'"" [2025-09-07 10:07:04][354255811347188][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:07:04][354255811347188][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811347188\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8882\"}'\'' -e'"" [2025-09-07 10:07:07][354255811347188][3778 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f88fe3a-555f-4f0f-9e17-b6edf41ffa57","id":"QR_5f88fe3a-555f-4f0f-9e17-b6edf41ffa57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:07:07][354255811347188][3934 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-07 10:07:07][354255811347188][3934 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-07 10:07:07][354255811347188][3934 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:07:09][354255811347188][0 ms][INFO] === Request start === [2025-09-07 10:07:09][354255811347188][1 ms][DEBUG] START check_scloud [2025-09-07 10:07:09][354255811347188][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:07:10][354255811347188][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 21472 4973 24303032 142272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:07:10][354255811347188][272 ms][DEBUG] targetPkg: running [2025-09-07 10:07:10][354255811347188][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-07 10:07:10][354255811347188][272 ms][DEBUG] START check_boot_completed [2025-09-07 10:07:10][354255811347188][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:07:10][354255811347188][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:07:10][354255811347188][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:07:10][354255811347188][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:07:10][354255811347188][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 10:07:10][354255811347188][366 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:07:10][354255811347188][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811347188\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2083\"}'\'' -e'"" [2025-09-07 10:07:10][354255811347188][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:07:10][354255811347188][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811347188\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2083\"}'\'' -e'"" [2025-09-07 10:07:15][354255811347188][5443 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f902b9b-746a-42f6-bffa-3d3e0ed96e23","id":"QR_4f902b9b-746a-42f6-bffa-3d3e0ed96e23","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:07:15][354255811347188][5599 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-07 10:07:15][354255811347188][5599 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-07 10:07:15][354255811347188][5599 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:08:03][350785730177211][0 ms][INFO] === Request start === [2025-09-07 10:08:03][350785730177211][1 ms][DEBUG] START check_scloud [2025-09-07 10:08:03][350785730177211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:08:04][350785730177211][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 21472 4973 24412664 154484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:08:04][350785730177211][263 ms][DEBUG] targetPkg: running [2025-09-07 10:08:04][350785730177211][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 10:08:04][350785730177211][263 ms][DEBUG] START check_boot_completed [2025-09-07 10:08:04][350785730177211][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:08:04][350785730177211][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:08:04][350785730177211][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:08:04][350785730177211][358 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 10:08:04][350785730177211][358 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 10:08:04][350785730177211][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:08:04][350785730177211][512 ms][DEBUG] SU: done in 154 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2498\nsuccessfulTxPacketsPerSecond: 0.5448088684253363\nretriedTxPackets: 569\nretriedTxPacketsPerSecond: 0.13620221710633407\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2357\nsuccessfulRxPacketsPerSecond: 0.4983007942914661\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:08:04][350785730177211][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:08:05][350785730177211][1856 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.739/290.739/290.739/0.000 ms\n [2025-09-07 10:08:05][350785730177211][1856 ms][DEBUG] check_internet: online [2025-09-07 10:08:05][350785730177211][1856 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:08:05][350785730177211][1856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350785730177211\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2560\"}'\'' -e'"" [2025-09-07 10:08:05][350785730177211][1856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:08:05][350785730177211][1856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350785730177211\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2560\"}'\'' -e'"" [2025-09-07 10:08:09][350785730177211][5745 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f125a558-1557-42bf-b39d-63681a7ac450","id":"QR_f125a558-1557-42bf-b39d-63681a7ac450","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:08:09][350785730177211][5902 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-07 10:08:09][350785730177211][5902 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-07 10:08:09][350785730177211][5902 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:08:12][350785730177211][1 ms][INFO] === Request start === [2025-09-07 10:08:12][350785730177211][1 ms][DEBUG] START check_scloud [2025-09-07 10:08:12][350785730177211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:08:12][350785730177211][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 21472 4973 24589888 165452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:08:12][350785730177211][294 ms][DEBUG] targetPkg: running [2025-09-07 10:08:12][350785730177211][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 10:08:12][350785730177211][294 ms][DEBUG] START check_boot_completed [2025-09-07 10:08:12][350785730177211][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:08:12][350785730177211][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:08:12][350785730177211][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:08:12][350785730177211][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:08:12][350785730177211][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:08:12][350785730177211][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:08:12][350785730177211][528 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31192 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2498\nsuccessfulTxPacketsPerSecond: 0.5448088684253363\nretriedTxPackets: 569\nretriedTxPacketsPerSecond: 0.13620221710633407\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2357\nsuccessfulRxPacketsPerSecond: 0.4983007942914661\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:08:12][350785730177211][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:08:13][350785730177211][919 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.966/276.966/276.966/0.000 ms\n [2025-09-07 10:08:13][350785730177211][919 ms][DEBUG] check_internet: online [2025-09-07 10:08:13][350785730177211][919 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:08:13][350785730177211][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350785730177211\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2392\"}'\'' -e'"" [2025-09-07 10:08:13][350785730177211][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:08:13][350785730177211][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350785730177211\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2392\"}'\'' -e'"" [2025-09-07 10:08:18][350785730177211][6074 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9f9a2fa-873e-43a7-9e84-aa3ebad96ebb","id":"QR_c9f9a2fa-873e-43a7-9e84-aa3ebad96ebb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:08:18][350785730177211][6230 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-07 10:08:18][350785730177211][6230 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 10:08:18][350785730177211][6230 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:09:03][351234169024007][0 ms][INFO] === Request start === [2025-09-07 10:09:03][351234169024007][1 ms][DEBUG] START check_scloud [2025-09-07 10:09:03][351234169024007][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:09:04][351234169024007][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 21472 4973 24693376 177352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:09:04][351234169024007][309 ms][DEBUG] targetPkg: running [2025-09-07 10:09:04][351234169024007][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 10:09:04][351234169024007][309 ms][DEBUG] START check_boot_completed [2025-09-07 10:09:04][351234169024007][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:09:04][351234169024007][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:09:04][351234169024007][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:09:04][351234169024007][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:09:04][351234169024007][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:09:04][351234169024007][418 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:09:04][351234169024007][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234169024007\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9749\"}'\'' -e'"" [2025-09-07 10:09:04][351234169024007][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:09:04][351234169024007][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234169024007\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9749\"}'\'' -e'"" [2025-09-07 10:09:07][351234169024007][3745 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e14833b3-0719-4398-883d-c4e72bec804e","id":"QR_e14833b3-0719-4398-883d-c4e72bec804e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:09:07][351234169024007][3901 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-07 10:09:07][351234169024007][3901 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-07 10:09:07][351234169024007][3902 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:09:10][351234169024007][0 ms][INFO] === Request start === [2025-09-07 10:09:10][351234169024007][1 ms][DEBUG] START check_scloud [2025-09-07 10:09:10][351234169024007][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:09:10][351234169024007][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 21472 4973 24835976 188260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:09:10][351234169024007][249 ms][DEBUG] targetPkg: running [2025-09-07 10:09:10][351234169024007][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-07 10:09:10][351234169024007][249 ms][DEBUG] START check_boot_completed [2025-09-07 10:09:10][351234169024007][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:09:10][351234169024007][296 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:09:10][351234169024007][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:09:10][351234169024007][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:09:10][351234169024007][342 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 10:09:10][351234169024007][342 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:09:10][351234169024007][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234169024007\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1173\"}'\'' -e'"" [2025-09-07 10:09:10][351234169024007][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:09:10][351234169024007][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234169024007\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1173\"}'\'' -e'"" [2025-09-07 10:09:15][351234169024007][5107 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_413c26a9-0945-4319-8079-49184c28279b","id":"QR_413c26a9-0945-4319-8079-49184c28279b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:09:15][351234169024007][5263 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-07 10:09:15][351234169024007][5263 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-07 10:09:15][351234169024007][5263 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:17:03][352469858063507][1 ms][INFO] === Request start === [2025-09-07 10:17:03][352469858063507][1 ms][DEBUG] START check_scloud [2025-09-07 10:17:03][352469858063507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:17:04][352469858063507][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21472 4973 24965120 200728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:17:04][352469858063507][301 ms][DEBUG] targetPkg: running [2025-09-07 10:17:04][352469858063507][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 10:17:04][352469858063507][301 ms][DEBUG] START check_boot_completed [2025-09-07 10:17:04][352469858063507][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:17:04][352469858063507][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:17:04][352469858063507][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:17:04][352469858063507][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:17:04][352469858063507][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:17:04][352469858063507][379 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:17:04][352469858063507][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858063507\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7193\"}'\'' -e'"" [2025-09-07 10:17:04][352469858063507][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:17:04][352469858063507][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858063507\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7193\"}'\'' -e'"" [2025-09-07 10:17:08][352469858063507][4925 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92a70678-f440-431d-8ec0-bd0358d63a2b","id":"QR_92a70678-f440-431d-8ec0-bd0358d63a2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:17:08][352469858063507][5081 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-07 10:17:08][352469858063507][5081 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-07 10:17:08][352469858063507][5081 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:17:11][352469858063507][0 ms][INFO] === Request start === [2025-09-07 10:17:11][352469858063507][1 ms][DEBUG] START check_scloud [2025-09-07 10:17:11][352469858063507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:17:11][352469858063507][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21472 4973 25155860 205024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:17:11][352469858063507][308 ms][DEBUG] targetPkg: running [2025-09-07 10:17:11][352469858063507][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 10:17:11][352469858063507][308 ms][DEBUG] START check_boot_completed [2025-09-07 10:17:11][352469858063507][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:17:11][352469858063507][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:17:11][352469858063507][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:17:11][352469858063507][417 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:17:11][352469858063507][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:17:11][352469858063507][417 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:17:11][352469858063507][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858063507\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5520\"}'\'' -e'"" [2025-09-07 10:17:11][352469858063507][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:17:11][352469858063507][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858063507\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5520\"}'\'' -e'"" [2025-09-07 10:17:19][352469858063507][8290 ms][DEBUG] proc_open done in 7873 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 10:17:19][352469858063507][8290 ms][DEBUG] END runCmdUntilRes#1 in 7873 ms [2025-09-07 10:17:19][352469858063507][8290 ms][WARN] Detected error: Process with pid 21472 either refused to load frida-agent, or terminated during injectionProcess with pid 21472 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 10:17:19][352469858063507][8290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 10:17:19][352469858063507][8681 ms][DEBUG] SU: done in 391 ms; out [2025-09-07 10:17:19][352469858063507][8681 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 10:17:20][352469858063507][8884 ms][DEBUG] SU: done in 203 ms; out [2025-09-07 10:17:20][352469858063507][8884 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 10:17:20][352469858063507][8884 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 10:17:20][352469858063507][9431 ms][DEBUG] SU: done in 546 ms; out [2025-09-07 10:17:20][352469858063507][9431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 10:17:20][352469858063507][9681 ms][DEBUG] SU: done in 250 ms; out [2025-09-07 10:17:22][352469858063507][11696 ms][DEBUG] START check_boot_completed [2025-09-07 10:17:22][352469858063507][11696 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:17:22][352469858063507][11743 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:17:22][352469858063507][11743 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:17:23][352469858063507][11805 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:17:23][352469858063507][11805 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 10:17:26][352469858063507][14820 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 10:17:26][352469858063507][14820 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858063507\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5520\"}'\'' -e'"" [2025-09-07 10:17:26][352469858063507][15320 ms][DEBUG] proc_open done in 500 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-07 10:17:26][352469858063507][15320 ms][DEBUG] END runCmdUntilRes#2 in 500 ms [2025-09-07 10:17:26][352469858063507][15320 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-07 10:17:26][352469858063507][15320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 10:17:26][352469858063507][15711 ms][DEBUG] SU: done in 390 ms; out [2025-09-07 10:18:03][353325478274081][0 ms][INFO] === Request start === [2025-09-07 10:18:03][353325478274081][1 ms][DEBUG] START check_scloud [2025-09-07 10:18:03][353325478274081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:18:04][353325478274081][714 ms][DEBUG] SU: done in 714 ms; out [2025-09-07 10:18:04][353325478274081][715 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 10:18:04][353325478274081][761 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 10:18:04][353325478274081][761 ms][DEBUG] check_devices: device found [2025-09-07 10:18:04][353325478274081][761 ms][WARN] targetPkg: not running, restarting [2025-09-07 10:18:04][353325478274081][761 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 10:18:04][353325478274081][1011 ms][DEBUG] SU: done in 250 ms; out [2025-09-07 10:18:04][353325478274081][1011 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 10:18:05][353325478274081][1277 ms][DEBUG] SU: done in 266 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 10:18:07][353325478274081][3292 ms][DEBUG] END check_scloud in 3291 ms [2025-09-07 10:18:07][353325478274081][3292 ms][DEBUG] START check_boot_completed [2025-09-07 10:18:07][353325478274081][3292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:18:07][353325478274081][3339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:18:07][353325478274081][3339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:18:07][353325478274081][3448 ms][DEBUG] SU: done in 109 ms; out [2025-09-07 10:18:07][353325478274081][3448 ms][DEBUG] END check_boot_completed in 156 ms [2025-09-07 10:18:07][353325478274081][3448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:18:07][353325478274081][3745 ms][DEBUG] SU: done in 297 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2975114 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 86\nsuccessfulTxPacketsPerSecond: 3.8856633577377964\nretriedTxPackets: 6\nretriedTxPacketsPerSecond: 0.201524002916693\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 77\nsuccessfulRxPacketsPerSecond: 4.166279306048839\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:18:07][353325478274081][3745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:18:08][353325478274081][4745 ms][DEBUG] SU: done in 1000 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.722/306.722/306.722/0.000 ms\n [2025-09-07 10:18:08][353325478274081][4745 ms][DEBUG] check_internet: online [2025-09-07 10:18:08][353325478274081][4745 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:18:08][353325478274081][4745 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478274081\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3915\"}'\'' -e'"" [2025-09-07 10:18:08][353325478274081][4745 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:18:08][353325478274081][4745 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478274081\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3915\"}'\'' -e'"" [2025-09-07 10:18:14][353325478274081][10837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c66a844-5ca2-4799-825c-dcf24fe7b8bb","id":"QR_1c66a844-5ca2-4799-825c-dcf24fe7b8bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:18:14][353325478274081][10993 ms][DEBUG] proc_open done in 6248 ms; code=255; res.len=3343 [2025-09-07 10:18:14][353325478274081][10993 ms][DEBUG] END runCmdUntilRes#1 in 6249 ms [2025-09-07 10:18:14][353325478274081][10993 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:18:17][353325478274081][0 ms][INFO] === Request start === [2025-09-07 10:18:17][353325478274081][1 ms][DEBUG] START check_scloud [2025-09-07 10:18:17][353325478274081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:18:17][353325478274081][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 27611 24531 23504484 116480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:18:17][353325478274081][305 ms][DEBUG] targetPkg: running [2025-09-07 10:18:17][353325478274081][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 10:18:17][353325478274081][305 ms][DEBUG] START check_boot_completed [2025-09-07 10:18:17][353325478274081][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:18:17][353325478274081][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:18:17][353325478274081][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:18:17][353325478274081][399 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:18:17][353325478274081][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 10:18:17][353325478274081][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:18:17][353325478274081][540 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2975114 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 166\nsuccessfulTxPacketsPerSecond: 15.780641380390463\nretriedTxPackets: 15\nretriedTxPacketsPerSecond: 1.0455456325888604\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 149\nsuccessfulRxPacketsPerSecond: 13.804000303793199\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:18:17][353325478274081][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:18:17][353325478274081][883 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.725/220.725/220.725/0.000 ms\n [2025-09-07 10:18:17][353325478274081][884 ms][DEBUG] check_internet: online [2025-09-07 10:18:17][353325478274081][884 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:18:17][353325478274081][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478274081\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8628\"}'\'' -e'"" [2025-09-07 10:18:17][353325478274081][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:18:17][353325478274081][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478274081\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8628\"}'\'' -e'"" [2025-09-07 10:18:24][353325478274081][7772 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae56a99e-b835-4178-86ff-8a60120835f8","id":"QR_ae56a99e-b835-4178-86ff-8a60120835f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:18:25][353325478274081][7929 ms][DEBUG] proc_open done in 7044 ms; code=255; res.len=3343 [2025-09-07 10:18:25][353325478274081][7929 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-09-07 10:18:25][353325478274081][7929 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:19:03][358673442044519][0 ms][INFO] === Request start === [2025-09-07 10:19:03][358673442044519][1 ms][DEBUG] START check_scloud [2025-09-07 10:19:03][358673442044519][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:19:03][358673442044519][378 ms][DEBUG] SU: done in 377 ms; outu0_a118 27611 24531 23552512 57792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:19:03][358673442044519][378 ms][DEBUG] targetPkg: running [2025-09-07 10:19:03][358673442044519][378 ms][DEBUG] END check_scloud in 378 ms [2025-09-07 10:19:03][358673442044519][378 ms][DEBUG] START check_boot_completed [2025-09-07 10:19:03][358673442044519][379 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:19:03][358673442044519][425 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:19:03][358673442044519][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:19:04][358673442044519][488 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:19:04][358673442044519][488 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:19:04][358673442044519][488 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:19:04][358673442044519][488 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673442044519\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7975\"}'\'' -e'"" [2025-09-07 10:19:04][358673442044519][488 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:19:04][358673442044519][488 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673442044519\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7975\"}'\'' -e'"" [2025-09-07 10:19:08][358673442044519][4846 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_252c10a5-636b-4b1e-8db4-ec0426f13fe3","id":"QR_252c10a5-636b-4b1e-8db4-ec0426f13fe3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:19:08][358673442044519][5002 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-07 10:19:08][358673442044519][5002 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-07 10:19:08][358673442044519][5002 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:19:11][358673442044519][1 ms][INFO] === Request start === [2025-09-07 10:19:11][358673442044519][1 ms][DEBUG] START check_scloud [2025-09-07 10:19:11][358673442044519][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:19:11][358673442044519][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 27611 24531 23729736 80988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:19:11][358673442044519][289 ms][DEBUG] targetPkg: running [2025-09-07 10:19:11][358673442044519][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 10:19:11][358673442044519][289 ms][DEBUG] START check_boot_completed [2025-09-07 10:19:11][358673442044519][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:19:11][358673442044519][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:19:11][358673442044519][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:19:11][358673442044519][369 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 10:19:11][358673442044519][369 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 10:19:11][358673442044519][369 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:19:11][358673442044519][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673442044519\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4557\"}'\'' -e'"" [2025-09-07 10:19:11][358673442044519][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:19:11][358673442044519][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358673442044519\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4557\"}'\'' -e'"" [2025-09-07 10:19:16][358673442044519][5413 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41a04b58-4798-4d4e-9d21-0ae1aa0b08d2","id":"QR_41a04b58-4798-4d4e-9d21-0ae1aa0b08d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:19:16][358673442044519][5569 ms][DEBUG] proc_open done in 5200 ms; code=255; res.len=3343 [2025-09-07 10:19:16][358673442044519][5569 ms][DEBUG] END runCmdUntilRes#1 in 5200 ms [2025-09-07 10:19:16][358673442044519][5569 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:21:03][351826112012722][0 ms][INFO] === Request start === [2025-09-07 10:21:03][351826112012722][1 ms][DEBUG] START check_scloud [2025-09-07 10:21:03][351826112012722][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:21:03][351826112012722][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 27611 24531 23833340 84864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:21:03][351826112012722][318 ms][DEBUG] targetPkg: running [2025-09-07 10:21:03][351826112012722][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 10:21:03][351826112012722][318 ms][DEBUG] START check_boot_completed [2025-09-07 10:21:03][351826112012722][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:21:03][351826112012722][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:21:03][351826112012722][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:21:03][351826112012722][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:21:03][351826112012722][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:21:03][351826112012722][396 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:21:03][351826112012722][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112012722\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7060\"}'\'' -e'"" [2025-09-07 10:21:03][351826112012722][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:21:03][351826112012722][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112012722\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7060\"}'\'' -e'"" [2025-09-07 10:21:08][351826112012722][5270 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e32d67a-2d4e-4545-94c0-b25bac9674b4","id":"QR_8e32d67a-2d4e-4545-94c0-b25bac9674b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:21:08][351826112012722][5426 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-07 10:21:08][351826112012722][5426 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-07 10:21:08][351826112012722][5426 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:21:10][351826112012722][0 ms][INFO] === Request start === [2025-09-07 10:21:10][351826112012722][1 ms][DEBUG] START check_scloud [2025-09-07 10:21:10][351826112012722][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:21:11][351826112012722][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 27611 24531 23982020 97500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:21:11][351826112012722][323 ms][DEBUG] targetPkg: running [2025-09-07 10:21:11][351826112012722][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 10:21:11][351826112012722][323 ms][DEBUG] START check_boot_completed [2025-09-07 10:21:11][351826112012722][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:21:11][351826112012722][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:21:11][351826112012722][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:21:11][351826112012722][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:21:11][351826112012722][401 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:21:11][351826112012722][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:21:11][351826112012722][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112012722\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7666\"}'\'' -e'"" [2025-09-07 10:21:11][351826112012722][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:21:11][351826112012722][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112012722\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7666\"}'\'' -e'"" [2025-09-07 10:21:16][351826112012722][5478 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe492cad-acb2-4b1c-b1de-6cc59cf0bba5","id":"QR_fe492cad-acb2-4b1c-b1de-6cc59cf0bba5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:21:16][351826112012722][5634 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-07 10:21:16][351826112012722][5634 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-07 10:21:16][351826112012722][5634 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:21:20][353154436157018][1 ms][INFO] === Request start === [2025-09-07 10:21:20][353154436157018][1 ms][DEBUG] START check_scloud [2025-09-07 10:21:20][353154436157018][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:21:21][353154436157018][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 27611 24531 24161484 108532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:21:21][353154436157018][324 ms][DEBUG] targetPkg: running [2025-09-07 10:21:21][353154436157018][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 10:21:21][353154436157018][324 ms][DEBUG] START check_boot_completed [2025-09-07 10:21:21][353154436157018][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:21:21][353154436157018][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:21:21][353154436157018][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:21:21][353154436157018][419 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 10:21:21][353154436157018][419 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 10:21:21][353154436157018][419 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:21:21][353154436157018][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154436157018\",\"model\":\"SM-M356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9485\"}'\'' -e'"" [2025-09-07 10:21:21][353154436157018][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:21:21][353154436157018][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154436157018\",\"model\":\"SM-M356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9485\"}'\'' -e'"" [2025-09-07 10:21:24][353154436157018][4120 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87a65082-2cfc-4231-aa65-5bf287b3a49e","id":"QR_87a65082-2cfc-4231-aa65-5bf287b3a49e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:21:25][353154436157018][4276 ms][DEBUG] proc_open done in 3856 ms; code=255; res.len=3343 [2025-09-07 10:21:25][353154436157018][4276 ms][DEBUG] END runCmdUntilRes#1 in 3856 ms [2025-09-07 10:21:25][353154436157018][4276 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:21:27][353154436157018][0 ms][INFO] === Request start === [2025-09-07 10:21:27][353154436157018][1 ms][DEBUG] START check_scloud [2025-09-07 10:21:27][353154436157018][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:21:27][353154436157018][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 27611 24531 24322480 122068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:21:27][353154436157018][256 ms][DEBUG] targetPkg: running [2025-09-07 10:21:27][353154436157018][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-07 10:21:27][353154436157018][256 ms][DEBUG] START check_boot_completed [2025-09-07 10:21:27][353154436157018][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:21:27][353154436157018][302 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:21:27][353154436157018][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:21:27][353154436157018][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:21:27][353154436157018][349 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 10:21:27][353154436157018][349 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:21:27][353154436157018][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154436157018\",\"model\":\"SM-M356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6544\"}'\'' -e'"" [2025-09-07 10:21:27][353154436157018][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:21:27][353154436157018][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154436157018\",\"model\":\"SM-M356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6544\"}'\'' -e'"" [2025-09-07 10:21:32][353154436157018][5223 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c4b4d7d-5bbd-43df-b1e6-fb84c2e7b9f5","id":"QR_6c4b4d7d-5bbd-43df-b1e6-fb84c2e7b9f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:21:32][353154436157018][5379 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-07 10:21:32][353154436157018][5379 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-07 10:21:32][353154436157018][5379 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:24:03][351785570184490][1 ms][INFO] === Request start === [2025-09-07 10:24:03][351785570184490][1 ms][DEBUG] START check_scloud [2025-09-07 10:24:03][351785570184490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:24:03][351785570184490][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 27611 24531 24405580 127116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:24:03][351785570184490][313 ms][DEBUG] targetPkg: running [2025-09-07 10:24:03][351785570184490][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 10:24:03][351785570184490][313 ms][DEBUG] START check_boot_completed [2025-09-07 10:24:03][351785570184490][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:24:03][351785570184490][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:24:03][351785570184490][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:24:03][351785570184490][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:24:03][351785570184490][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:24:03][351785570184490][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:24:03][351785570184490][547 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2975114 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1014\nsuccessfulTxPacketsPerSecond: 2.6562724502916004\nretriedTxPackets: 148\nretriedTxPacketsPerSecond: 0.41630899706373214\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1037\nsuccessfulRxPacketsPerSecond: 2.788901865285356\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:24:03][351785570184490][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:24:05][351785570184490][2140 ms][DEBUG] SU: done in 1593 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=403 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 403.151/403.151/403.151/0.000 ms\n [2025-09-07 10:24:05][351785570184490][2140 ms][DEBUG] check_internet: online [2025-09-07 10:24:05][351785570184490][2140 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:24:05][351785570184490][2141 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351785570184490\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9283\"}'\'' -e'"" [2025-09-07 10:24:05][351785570184490][2141 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:24:05][351785570184490][2141 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351785570184490\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9283\"}'\'' -e'"" [2025-09-07 10:24:09][351785570184490][6280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2bc6622-29e4-47da-815e-b3aee93b55d1","id":"QR_a2bc6622-29e4-47da-815e-b3aee93b55d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:24:09][351785570184490][6436 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-09-07 10:24:09][351785570184490][6436 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-07 10:24:09][351785570184490][6436 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:24:12][351785570184490][0 ms][INFO] === Request start === [2025-09-07 10:24:12][351785570184490][1 ms][DEBUG] START check_scloud [2025-09-07 10:24:12][351785570184490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:24:12][351785570184490][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 27611 24531 24536844 138416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:24:12][351785570184490][318 ms][DEBUG] targetPkg: running [2025-09-07 10:24:12][351785570184490][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 10:24:12][351785570184490][318 ms][DEBUG] START check_boot_completed [2025-09-07 10:24:12][351785570184490][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:24:12][351785570184490][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:24:12][351785570184490][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:24:12][351785570184490][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:24:12][351785570184490][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:24:12][351785570184490][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:24:12][351785570184490][552 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2975114 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1014\nsuccessfulTxPacketsPerSecond: 2.6562724502916004\nretriedTxPackets: 148\nretriedTxPacketsPerSecond: 0.41630899706373214\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1037\nsuccessfulRxPacketsPerSecond: 2.788901865285356\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:24:12][351785570184490][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:24:13][351785570184490][880 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.456/226.456/226.456/0.000 ms\n [2025-09-07 10:24:13][351785570184490][880 ms][DEBUG] check_internet: online [2025-09-07 10:24:13][351785570184490][880 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:24:13][351785570184490][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351785570184490\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5766\"}'\'' -e'"" [2025-09-07 10:24:13][351785570184490][880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:24:13][351785570184490][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351785570184490\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5766\"}'\'' -e'"" [2025-09-07 10:24:18][351785570184490][6238 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18777397-2860-43f7-9d89-db8ed5b87ed0","id":"QR_18777397-2860-43f7-9d89-db8ed5b87ed0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:24:18][351785570184490][6394 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 10:24:18][351785570184490][6394 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 10:24:18][351785570184490][6395 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:24:22][350637542130476][0 ms][INFO] === Request start === [2025-09-07 10:24:22][350637542130476][1 ms][DEBUG] START check_scloud [2025-09-07 10:24:22][350637542130476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:24:23][350637542130476][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 27611 24531 24671124 147800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:24:23][350637542130476][287 ms][DEBUG] targetPkg: running [2025-09-07 10:24:23][350637542130476][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-07 10:24:23][350637542130476][287 ms][DEBUG] START check_boot_completed [2025-09-07 10:24:23][350637542130476][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:24:23][350637542130476][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:24:23][350637542130476][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:24:23][350637542130476][381 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:24:23][350637542130476][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 10:24:23][350637542130476][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:24:23][350637542130476][521 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2975114 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1014\nsuccessfulTxPacketsPerSecond: 2.6562724502916004\nretriedTxPackets: 148\nretriedTxPacketsPerSecond: 0.41630899706373214\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1037\nsuccessfulRxPacketsPerSecond: 2.788901865285356\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:24:23][350637542130476][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:24:23][350637542130476][850 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.452/226.452/226.452/0.000 ms\n [2025-09-07 10:24:23][350637542130476][850 ms][DEBUG] check_internet: online [2025-09-07 10:24:23][350637542130476][850 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:24:23][350637542130476][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542130476\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1832\"}'\'' -e'"" [2025-09-07 10:24:23][350637542130476][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:24:23][350637542130476][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542130476\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1832\"}'\'' -e'"" [2025-09-07 10:24:27][350637542130476][4317 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e69a896e-32a8-495d-96a0-0fe1f003cc3b","id":"QR_e69a896e-32a8-495d-96a0-0fe1f003cc3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:24:27][350637542130476][4474 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-09-07 10:24:27][350637542130476][4474 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-07 10:24:27][350637542130476][4474 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:24:29][350637542130476][0 ms][INFO] === Request start === [2025-09-07 10:24:29][350637542130476][1 ms][DEBUG] START check_scloud [2025-09-07 10:24:29][350637542130476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:24:29][350637542130476][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 27611 24531 24827512 157620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:24:29][350637542130476][309 ms][DEBUG] targetPkg: running [2025-09-07 10:24:29][350637542130476][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 10:24:29][350637542130476][309 ms][DEBUG] START check_boot_completed [2025-09-07 10:24:29][350637542130476][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:24:29][350637542130476][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:24:29][350637542130476][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:24:30][350637542130476][418 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:24:30][350637542130476][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:24:30][350637542130476][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:24:30][350637542130476][574 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2975114 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1014\nsuccessfulTxPacketsPerSecond: 2.6562724502916004\nretriedTxPackets: 148\nretriedTxPacketsPerSecond: 0.41630899706373214\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1037\nsuccessfulRxPacketsPerSecond: 2.788901865285356\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:24:30][350637542130476][574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:24:30][350637542130476][996 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.306/309.306/309.306/0.000 ms\n [2025-09-07 10:24:30][350637542130476][996 ms][DEBUG] check_internet: online [2025-09-07 10:24:30][350637542130476][997 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:24:30][350637542130476][997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542130476\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2300\"}'\'' -e'"" [2025-09-07 10:24:30][350637542130476][997 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:24:30][350637542130476][997 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542130476\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2300\"}'\'' -e'"" [2025-09-07 10:24:39][350637542130476][9853 ms][DEBUG] proc_open done in 8856 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 10:24:39][350637542130476][9853 ms][DEBUG] END runCmdUntilRes#1 in 8857 ms [2025-09-07 10:24:39][350637542130476][9853 ms][WARN] Detected error: Process with pid 27611 either refused to load frida-agent, or terminated during injectionProcess with pid 27611 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 10:24:39][350637542130476][9853 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 10:24:39][350637542130476][10181 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 10:24:39][350637542130476][10182 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 10:24:40][350637542130476][10572 ms][DEBUG] SU: done in 390 ms; out [2025-09-07 10:24:40][350637542130476][10572 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 10:24:40][350637542130476][10572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 10:24:40][350637542130476][11009 ms][DEBUG] SU: done in 437 ms; out [2025-09-07 10:24:40][350637542130476][11010 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 10:24:40][350637542130476][11290 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 10:24:42][350637542130476][13305 ms][DEBUG] START check_boot_completed [2025-09-07 10:24:42][350637542130476][13306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:24:42][350637542130476][13353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:24:42][350637542130476][13353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:24:43][350637542130476][13415 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:24:43][350637542130476][13415 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:24:46][350637542130476][16430 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 10:24:46][350637542130476][16430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542130476\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2300\"}'\'' -e'"" [2025-09-07 10:24:47][350637542130476][17852 ms][DEBUG] proc_open done in 1421 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 10:24:47][350637542130476][17852 ms][DEBUG] END runCmdUntilRes#2 in 1422 ms [2025-09-07 10:24:47][350637542130476][17852 ms][WARN] Detected error 2; Reboot the device [2025-09-07 10:24:47][350637542130476][17852 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 10:24:47][350637542130476][18133 ms][DEBUG] SU: done in 281 ms; outsystem 6442 6103 7735636 155248 0 0 R system_server\n [2025-09-07 10:24:47][350637542130476][18133 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 10:24:48][350637542130476][18945 ms][DEBUG] SU: done in 812 ms; out [2025-09-07 10:25:03][352288967495354][0 ms][INFO] === Request start === [2025-09-07 10:25:03][352288967495354][1 ms][DEBUG] START check_scloud [2025-09-07 10:25:03][352288967495354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:25:03][352288967495354][45 ms][DEBUG] SU: done in 44 ms; out [2025-09-07 10:25:03][352288967495354][45 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 10:25:03][352288967495354][76 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 10:25:03][352288967495354][76 ms][WARN] check_devices: no device [2025-09-07 10:25:03][352288967495354][76 ms][WARN] check_devices: no device [2025-09-07 10:25:03][352288967495354][76 ms][DEBUG] END check_scloud in 75 ms [2025-09-07 10:26:03][352288967495354][0 ms][INFO] === Request start === [2025-09-07 10:26:03][352288967495354][0 ms][DEBUG] START check_scloud [2025-09-07 10:26:03][352288967495354][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:26:03][352288967495354][438 ms][DEBUG] SU: done in 438 ms; out [2025-09-07 10:26:03][352288967495354][438 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 10:26:03][352288967495354][485 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 10:26:03][352288967495354][485 ms][DEBUG] check_devices: device found [2025-09-07 10:26:03][352288967495354][485 ms][WARN] targetPkg: not running, restarting [2025-09-07 10:26:03][352288967495354][485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 10:26:04][352288967495354][656 ms][DEBUG] SU: done in 172 ms; out [2025-09-07 10:26:04][352288967495354][657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 10:26:04][352288967495354][906 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 10:26:06][352288967495354][2921 ms][DEBUG] END check_scloud in 2921 ms [2025-09-07 10:26:06][352288967495354][2921 ms][DEBUG] START check_boot_completed [2025-09-07 10:26:06][352288967495354][2922 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:26:06][352288967495354][2968 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:26:06][352288967495354][2968 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:26:06][352288967495354][3031 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:26:06][352288967495354][3031 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 10:26:06][352288967495354][3031 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:26:06][352288967495354][3203 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 84\nsuccessfulTxPacketsPerSecond: 3.2114717746264505\nretriedTxPackets: 2\nretriedTxPacketsPerSecond: 0.044003068137980446\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 73\nsuccessfulRxPacketsPerSecond: 3.4186576736591068\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:26:06][352288967495354][3203 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:26:07][352288967495354][4171 ms][DEBUG] SU: done in 968 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.863/291.863/291.863/0.000 ms\n [2025-09-07 10:26:07][352288967495354][4171 ms][DEBUG] check_internet: online [2025-09-07 10:26:07][352288967495354][4171 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:26:07][352288967495354][4172 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967495354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8077\"}'\'' -e'"" [2025-09-07 10:26:07][352288967495354][4172 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:26:07][352288967495354][4172 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967495354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8077\"}'\'' -e'"" [2025-09-07 10:26:13][352288967495354][9560 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a542d97-b571-4fc8-be8e-aff5adfbc49d","id":"QR_6a542d97-b571-4fc8-be8e-aff5adfbc49d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:26:13][352288967495354][9717 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-07 10:26:13][352288967495354][9717 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-07 10:26:13][352288967495354][9717 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:26:15][352288967495354][1 ms][INFO] === Request start === [2025-09-07 10:26:15][352288967495354][1 ms][DEBUG] START check_scloud [2025-09-07 10:26:15][352288967495354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:26:15][352288967495354][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 8603 4972 23546524 117388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:26:15][352288967495354][309 ms][DEBUG] targetPkg: running [2025-09-07 10:26:15][352288967495354][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 10:26:15][352288967495354][309 ms][DEBUG] START check_boot_completed [2025-09-07 10:26:15][352288967495354][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:26:15][352288967495354][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:26:15][352288967495354][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:26:15][352288967495354][449 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 10:26:15][352288967495354][449 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 10:26:15][352288967495354][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:26:16][352288967495354][605 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 187\nsuccessfulTxPacketsPerSecond: 18.02572891815331\nretriedTxPackets: 19\nretriedTxPacketsPerSecond: 2.50842802476668\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 171\nsuccessfulRxPacketsPerSecond: 17.547362551131386\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:26:16][352288967495354][605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:26:16][352288967495354][965 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.000/264.000/264.000/0.000 ms\n [2025-09-07 10:26:16][352288967495354][965 ms][DEBUG] check_internet: online [2025-09-07 10:26:16][352288967495354][965 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:26:16][352288967495354][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967495354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8548\"}'\'' -e'"" [2025-09-07 10:26:16][352288967495354][965 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:26:16][352288967495354][965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967495354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8548\"}'\'' -e'"" [2025-09-07 10:26:22][352288967495354][6838 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dfbf890-f276-45c8-9be8-4537fb633e4a","id":"QR_5dfbf890-f276-45c8-9be8-4537fb633e4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:26:22][352288967495354][6994 ms][DEBUG] proc_open done in 6030 ms; code=255; res.len=3343 [2025-09-07 10:26:22][352288967495354][6994 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-09-07 10:26:22][352288967495354][6995 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:26:28][350545461920894][1 ms][INFO] === Request start === [2025-09-07 10:26:28][350545461920894][1 ms][DEBUG] START check_scloud [2025-09-07 10:26:28][350545461920894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:26:28][350545461920894][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 8603 4972 23699248 90908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:26:28][350545461920894][324 ms][DEBUG] targetPkg: running [2025-09-07 10:26:28][350545461920894][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 10:26:28][350545461920894][324 ms][DEBUG] START check_boot_completed [2025-09-07 10:26:28][350545461920894][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:26:28][350545461920894][369 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 10:26:28][350545461920894][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:26:28][350545461920894][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:26:28][350545461920894][416 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 10:26:28][350545461920894][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:26:28][350545461920894][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 215\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 27\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 204\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:26:28][350545461920894][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:26:29][350545461920894][979 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.016/273.016/273.016/0.000 ms\n [2025-09-07 10:26:29][350545461920894][979 ms][DEBUG] check_internet: online [2025-09-07 10:26:29][350545461920894][979 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:26:29][350545461920894][979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461920894\",\"model\":\"SM-T860\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52MA0CQJVE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9713\"}'\'' -e'"" [2025-09-07 10:26:29][350545461920894][979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:26:29][350545461920894][979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461920894\",\"model\":\"SM-T860\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52MA0CQJVE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9713\"}'\'' -e'"" [2025-09-07 10:26:34][350545461920894][6352 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9431c9cc-79a9-424f-b42b-6e3ca668b0c8","id":"QR_9431c9cc-79a9-424f-b42b-6e3ca668b0c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:26:34][350545461920894][6508 ms][DEBUG] proc_open done in 5529 ms; code=255; res.len=3343 [2025-09-07 10:26:34][350545461920894][6508 ms][DEBUG] END runCmdUntilRes#1 in 5529 ms [2025-09-07 10:26:34][350545461920894][6509 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:28:04][356587431197884][0 ms][INFO] === Request start === [2025-09-07 10:28:04][356587431197884][1 ms][DEBUG] START check_scloud [2025-09-07 10:28:04][356587431197884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:28:04][356587431197884][355 ms][DEBUG] SU: done in 354 ms; outu0_a118 8603 4972 23723824 69288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:28:04][356587431197884][355 ms][DEBUG] targetPkg: running [2025-09-07 10:28:04][356587431197884][355 ms][DEBUG] END check_scloud in 354 ms [2025-09-07 10:28:04][356587431197884][355 ms][DEBUG] START check_boot_completed [2025-09-07 10:28:04][356587431197884][355 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:28:04][356587431197884][402 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:28:04][356587431197884][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:28:04][356587431197884][464 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 10:28:04][356587431197884][464 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:28:04][356587431197884][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:28:04][356587431197884][621 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 776\nsuccessfulTxPacketsPerSecond: 7.389245208564188\nretriedTxPackets: 122\nretriedTxPacketsPerSecond: 1.3416518440280567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 804\nsuccessfulRxPacketsPerSecond: 6.8608076691756885\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:28:04][356587431197884][621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:28:05][356587431197884][1058 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.314/340.314/340.314/0.000 ms\n [2025-09-07 10:28:05][356587431197884][1058 ms][DEBUG] check_internet: online [2025-09-07 10:28:05][356587431197884][1058 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:28:05][356587431197884][1058 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356587431197884\",\"model\":\"SM-S901N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9683\"}'\'' -e'"" [2025-09-07 10:28:05][356587431197884][1058 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:28:05][356587431197884][1058 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356587431197884\",\"model\":\"SM-S901N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9683\"}'\'' -e'"" [2025-09-07 10:28:09][356587431197884][5916 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37330ff1-fd93-4c8d-be2f-44bd82719a59","id":"QR_37330ff1-fd93-4c8d-be2f-44bd82719a59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:28:10][356587431197884][6072 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-07 10:28:10][356587431197884][6072 ms][DEBUG] END runCmdUntilRes#1 in 5015 ms [2025-09-07 10:28:10][356587431197884][6073 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:28:12][356587431197884][0 ms][INFO] === Request start === [2025-09-07 10:28:12][356587431197884][1 ms][DEBUG] START check_scloud [2025-09-07 10:28:12][356587431197884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:28:12][356587431197884][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 8603 4972 23842668 87128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:28:12][356587431197884][284 ms][DEBUG] targetPkg: running [2025-09-07 10:28:12][356587431197884][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 10:28:12][356587431197884][284 ms][DEBUG] START check_boot_completed [2025-09-07 10:28:12][356587431197884][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:28:12][356587431197884][331 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:28:12][356587431197884][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:28:12][356587431197884][424 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 10:28:12][356587431197884][425 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 10:28:12][356587431197884][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:28:13][356587431197884][565 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 776\nsuccessfulTxPacketsPerSecond: 7.389245208564188\nretriedTxPackets: 122\nretriedTxPacketsPerSecond: 1.3416518440280567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 804\nsuccessfulRxPacketsPerSecond: 6.8608076691756885\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:28:13][356587431197884][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:28:13][356587431197884][893 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.039/222.039/222.039/0.000 ms\n [2025-09-07 10:28:13][356587431197884][893 ms][DEBUG] check_internet: online [2025-09-07 10:28:13][356587431197884][893 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:28:13][356587431197884][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356587431197884\",\"model\":\"SM-S901N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8351\"}'\'' -e'"" [2025-09-07 10:28:13][356587431197884][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:28:13][356587431197884][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356587431197884\",\"model\":\"SM-S901N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8351\"}'\'' -e'"" [2025-09-07 10:28:18][356587431197884][6345 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e97b423-b5ba-4fea-97b0-357a8505e344","id":"QR_7e97b423-b5ba-4fea-97b0-357a8505e344","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:28:19][356587431197884][6501 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-07 10:28:19][356587431197884][6501 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-07 10:28:19][356587431197884][6501 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:28:23][352288969393813][1 ms][INFO] === Request start === [2025-09-07 10:28:23][352288969393813][1 ms][DEBUG] START check_scloud [2025-09-07 10:28:23][352288969393813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:28:23][352288969393813][326 ms][DEBUG] SU: done in 324 ms; outu0_a118 8603 4972 23977076 98560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:28:23][352288969393813][326 ms][DEBUG] targetPkg: running [2025-09-07 10:28:23][352288969393813][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-07 10:28:23][352288969393813][326 ms][DEBUG] START check_boot_completed [2025-09-07 10:28:23][352288969393813][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:28:23][352288969393813][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:28:23][352288969393813][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:28:23][352288969393813][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:28:23][352288969393813][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 10:28:23][352288969393813][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:28:23][352288969393813][529 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 776\nsuccessfulTxPacketsPerSecond: 7.389245208564188\nretriedTxPackets: 122\nretriedTxPacketsPerSecond: 1.3416518440280567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 804\nsuccessfulRxPacketsPerSecond: 6.8608076691756885\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:28:23][352288969393813][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:28:24][352288969393813][966 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=325 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 325.073/325.073/325.073/0.000 ms\n [2025-09-07 10:28:24][352288969393813][966 ms][DEBUG] check_internet: online [2025-09-07 10:28:24][352288969393813][966 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:28:24][352288969393813][966 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969393813\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8402\"}'\'' -e'"" [2025-09-07 10:28:24][352288969393813][966 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:28:24][352288969393813][966 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969393813\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8402\"}'\'' -e'"" [2025-09-07 10:28:27][352288969393813][4387 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_672cbeaa-f658-4170-a6d7-e65941beac83","id":"QR_672cbeaa-f658-4170-a6d7-e65941beac83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:28:27][352288969393813][4543 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-07 10:28:27][352288969393813][4543 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-07 10:28:27][352288969393813][4543 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:28:30][352288969393813][0 ms][INFO] === Request start === [2025-09-07 10:28:30][352288969393813][1 ms][DEBUG] START check_scloud [2025-09-07 10:28:30][352288969393813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:28:30][352288969393813][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 8603 4972 24139928 110140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:28:30][352288969393813][268 ms][DEBUG] targetPkg: running [2025-09-07 10:28:30][352288969393813][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 10:28:30][352288969393813][269 ms][DEBUG] START check_boot_completed [2025-09-07 10:28:30][352288969393813][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:28:30][352288969393813][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:28:30][352288969393813][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:28:30][352288969393813][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:28:30][352288969393813][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 10:28:30][352288969393813][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:28:30][352288969393813][487 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 776\nsuccessfulTxPacketsPerSecond: 7.389245208564188\nretriedTxPackets: 122\nretriedTxPacketsPerSecond: 1.3416518440280567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 804\nsuccessfulRxPacketsPerSecond: 6.8608076691756885\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:28:30][352288969393813][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:28:31][352288969393813][940 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=343 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 343.552/343.552/343.552/0.000 ms\n [2025-09-07 10:28:31][352288969393813][940 ms][DEBUG] check_internet: online [2025-09-07 10:28:31][352288969393813][940 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:28:31][352288969393813][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969393813\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6295\"}'\'' -e'"" [2025-09-07 10:28:31][352288969393813][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:28:31][352288969393813][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969393813\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6295\"}'\'' -e'"" [2025-09-07 10:28:35][352288969393813][5579 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fa41984-0eab-4418-b4e2-28bf5b0fa7d1","id":"QR_9fa41984-0eab-4418-b4e2-28bf5b0fa7d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:28:35][352288969393813][5736 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-07 10:28:35][352288969393813][5736 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-07 10:28:35][352288969393813][5736 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:29:06][352397452313681][0 ms][INFO] === Request start === [2025-09-07 10:29:06][352397452313681][1 ms][DEBUG] START check_scloud [2025-09-07 10:29:06][352397452313681][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:29:07][352397452313681][332 ms][DEBUG] SU: done in 332 ms; outu0_a118 8603 4972 24229044 120420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:29:07][352397452313681][333 ms][DEBUG] targetPkg: running [2025-09-07 10:29:07][352397452313681][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-07 10:29:07][352397452313681][333 ms][DEBUG] START check_boot_completed [2025-09-07 10:29:07][352397452313681][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:29:07][352397452313681][379 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:29:07][352397452313681][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:29:07][352397452313681][442 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:29:07][352397452313681][442 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:29:07][352397452313681][442 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:29:07][352397452313681][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452313681\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3303\"}'\'' -e'"" [2025-09-07 10:29:07][352397452313681][442 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:29:07][352397452313681][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452313681\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3303\"}'\'' -e'"" [2025-09-07 10:29:11][352397452313681][4831 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_045d05f3-3b2e-46d6-a4fb-a86c868ae412","id":"QR_045d05f3-3b2e-46d6-a4fb-a86c868ae412","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:29:11][352397452313681][4987 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-07 10:29:11][352397452313681][4987 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-07 10:29:11][352397452313681][4988 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:29:16][352828296138934][0 ms][INFO] === Request start === [2025-09-07 10:29:16][352828296138934][1 ms][DEBUG] START check_scloud [2025-09-07 10:29:16][352828296138934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:29:16][352828296138934][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 8603 4972 24390076 131396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:29:16][352828296138934][326 ms][DEBUG] targetPkg: running [2025-09-07 10:29:16][352828296138934][326 ms][DEBUG] END check_scloud in 326 ms [2025-09-07 10:29:16][352828296138934][326 ms][DEBUG] START check_boot_completed [2025-09-07 10:29:16][352828296138934][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:29:16][352828296138934][373 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:29:16][352828296138934][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:29:16][352828296138934][435 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:29:16][352828296138934][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:29:16][352828296138934][436 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:29:16][352828296138934][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352828296138934\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6603\"}'\'' -e'"" [2025-09-07 10:29:16][352828296138934][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:29:16][352828296138934][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352828296138934\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6603\"}'\'' -e'"" [2025-09-07 10:29:21][352828296138934][4856 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af43b7d3-ad2f-4539-949d-f9a17660e861","id":"QR_af43b7d3-ad2f-4539-949d-f9a17660e861","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:29:21][352828296138934][5012 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-07 10:29:21][352828296138934][5012 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-09-07 10:29:21][352828296138934][5012 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:29:23][352828296138934][0 ms][INFO] === Request start === [2025-09-07 10:29:23][352828296138934][1 ms][DEBUG] START check_scloud [2025-09-07 10:29:23][352828296138934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:29:23][352828296138934][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 8603 4972 24542916 142268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:29:23][352828296138934][310 ms][DEBUG] targetPkg: running [2025-09-07 10:29:23][352828296138934][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 10:29:23][352828296138934][311 ms][DEBUG] START check_boot_completed [2025-09-07 10:29:23][352828296138934][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:29:23][352828296138934][341 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 10:29:23][352828296138934][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:29:23][352828296138934][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:29:23][352828296138934][388 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 10:29:23][352828296138934][388 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:29:23][352828296138934][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352828296138934\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9376\"}'\'' -e'"" [2025-09-07 10:29:23][352828296138934][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:29:23][352828296138934][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352828296138934\",\"model\":\"SM-A736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9376\"}'\'' -e'"" [2025-09-07 10:29:29][352828296138934][5418 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dabb747c-799c-4efa-a043-3ad852fb4815","id":"QR_dabb747c-799c-4efa-a043-3ad852fb4815","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:29:29][352828296138934][5574 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 10:29:29][352828296138934][5574 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 10:29:29][352828296138934][5574 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:38:03][357515910592514][1 ms][INFO] === Request start === [2025-09-07 10:38:03][357515910592514][1 ms][DEBUG] START check_scloud [2025-09-07 10:38:03][357515910592514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:38:04][357515910592514][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 8603 4972 24653076 151088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:38:04][357515910592514][326 ms][DEBUG] targetPkg: running [2025-09-07 10:38:04][357515910592514][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-07 10:38:04][357515910592514][326 ms][DEBUG] START check_boot_completed [2025-09-07 10:38:04][357515910592514][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:38:04][357515910592514][356 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 10:38:04][357515910592514][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:38:04][357515910592514][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:38:04][357515910592514][403 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 10:38:04][357515910592514][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:38:04][357515910592514][528 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1203\nsuccessfulTxPacketsPerSecond: 0.3321034435806065\nretriedTxPackets: 221\nretriedTxPacketsPerSecond: 0.10627310194579408\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1181\nsuccessfulRxPacketsPerSecond: 0.27232482373609734\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:38:04][357515910592514][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:38:05][357515910592514][1950 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.779/296.779/296.779/0.000 ms\n [2025-09-07 10:38:05][357515910592514][1950 ms][DEBUG] check_internet: online [2025-09-07 10:38:05][357515910592514][1950 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:38:05][357515910592514][1950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357515910592514\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9585\"}'\'' -e'"" [2025-09-07 10:38:05][357515910592514][1950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:38:05][357515910592514][1950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357515910592514\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9585\"}'\'' -e'"" [2025-09-07 10:38:10][357515910592514][6136 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a0f321a-14f2-4960-aa67-d7ed778454a1","id":"QR_1a0f321a-14f2-4960-aa67-d7ed778454a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:38:10][357515910592514][6292 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-09-07 10:38:10][357515910592514][6292 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-09-07 10:38:10][357515910592514][6292 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:38:12][357515910592514][0 ms][INFO] === Request start === [2025-09-07 10:38:12][357515910592514][1 ms][DEBUG] START check_scloud [2025-09-07 10:38:12][357515910592514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:38:12][357515910592514][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 8603 4972 24815212 154284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:38:12][357515910592514][304 ms][DEBUG] targetPkg: running [2025-09-07 10:38:12][357515910592514][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 10:38:12][357515910592514][305 ms][DEBUG] START check_boot_completed [2025-09-07 10:38:12][357515910592514][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:38:12][357515910592514][350 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 10:38:12][357515910592514][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:38:13][357515910592514][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:38:13][357515910592514][413 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 10:38:13][357515910592514][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:38:13][357515910592514][569 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1203\nsuccessfulTxPacketsPerSecond: 0.3321034435806065\nretriedTxPackets: 221\nretriedTxPacketsPerSecond: 0.10627310194579408\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1181\nsuccessfulRxPacketsPerSecond: 0.27232482373609734\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:38:13][357515910592514][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:38:13][357515910592514][944 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.585/287.585/287.585/0.000 ms\n [2025-09-07 10:38:13][357515910592514][944 ms][DEBUG] check_internet: online [2025-09-07 10:38:13][357515910592514][944 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:38:13][357515910592514][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357515910592514\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2902\"}'\'' -e'"" [2025-09-07 10:38:13][357515910592514][944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:38:13][357515910592514][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357515910592514\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2902\"}'\'' -e'"" [2025-09-07 10:38:17][357515910592514][5349 ms][DEBUG] proc_open done in 4405 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-07 10:38:17][357515910592514][5349 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-07 10:38:17][357515910592514][5349 ms][WARN] Detected error: Process with pid 8603 either refused to load frida-agent, or terminated during injectionProcess with pid 8603 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 10:38:17][357515910592514][5349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 10:38:18][357515910592514][5630 ms][DEBUG] SU: done in 281 ms; outsystem 5395 4972 13028452 250760 ep_poll 0 S system_server\n [2025-09-07 10:38:18][357515910592514][5630 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 10:38:18][357515910592514][5771 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 10:38:18][357515910592514][5771 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 10:38:18][357515910592514][5771 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 10:38:18][357515910592514][5895 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 10:38:18][357515910592514][5895 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 10:38:18][357515910592514][6146 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 10:38:20][357515910592514][8160 ms][DEBUG] START check_boot_completed [2025-09-07 10:38:20][357515910592514][8161 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:38:20][357515910592514][8207 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:38:20][357515910592514][8207 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:38:20][357515910592514][8255 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 10:38:20][357515910592514][8255 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 10:38:23][357515910592514][11269 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 10:38:23][357515910592514][11269 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357515910592514\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2902\"}'\'' -e'"" [2025-09-07 10:38:28][357515910592514][16330 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80140abb-a550-499b-89af-efc50ceb24a3","id":"QR_80140abb-a550-499b-89af-efc50ceb24a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:38:29][357515910592514][16487 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 10:38:29][357515910592514][16487 ms][DEBUG] END runCmdUntilRes#2 in 5218 ms [2025-09-07 10:38:29][357515910592514][16487 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:38:33][350396222291716][1 ms][INFO] === Request start === [2025-09-07 10:38:33][350396222291716][1 ms][DEBUG] START check_scloud [2025-09-07 10:38:33][350396222291716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:38:33][350396222291716][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 18850 4972 23532740 124236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:38:33][350396222291716][261 ms][DEBUG] targetPkg: running [2025-09-07 10:38:33][350396222291716][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-07 10:38:33][350396222291716][261 ms][DEBUG] START check_boot_completed [2025-09-07 10:38:33][350396222291716][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:38:33][350396222291716][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:38:33][350396222291716][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:38:33][350396222291716][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:38:33][350396222291716][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:38:33][350396222291716][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:38:33][350396222291716][449 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1203\nsuccessfulTxPacketsPerSecond: 0.3321034435806065\nretriedTxPackets: 221\nretriedTxPacketsPerSecond: 0.10627310194579408\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1181\nsuccessfulRxPacketsPerSecond: 0.27232482373609734\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:38:33][350396222291716][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:38:34][350396222291716][839 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.988/254.988/254.988/0.000 ms\n [2025-09-07 10:38:34][350396222291716][839 ms][DEBUG] check_internet: online [2025-09-07 10:38:34][350396222291716][839 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:38:34][350396222291716][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396222291716\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7746\"}'\'' -e'"" [2025-09-07 10:38:34][350396222291716][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:38:34][350396222291716][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396222291716\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7746\"}'\'' -e'"" [2025-09-07 10:38:38][350396222291716][4744 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2b4f784-b71a-42ba-8caa-75477ea78682","id":"QR_b2b4f784-b71a-42ba-8caa-75477ea78682","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:38:38][350396222291716][4901 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-07 10:38:38][350396222291716][4901 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-07 10:38:38][350396222291716][4901 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:38:40][350396222291716][0 ms][INFO] === Request start === [2025-09-07 10:38:40][350396222291716][1 ms][DEBUG] START check_scloud [2025-09-07 10:38:40][350396222291716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:38:40][350396222291716][252 ms][DEBUG] SU: done in 252 ms; outu0_a118 18850 4972 23676440 137624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:38:40][350396222291716][253 ms][DEBUG] targetPkg: running [2025-09-07 10:38:40][350396222291716][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-07 10:38:40][350396222291716][253 ms][DEBUG] START check_boot_completed [2025-09-07 10:38:40][350396222291716][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:38:40][350396222291716][284 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:38:40][350396222291716][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:38:40][350396222291716][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:38:40][350396222291716][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:38:40][350396222291716][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:38:41][350396222291716][456 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1203\nsuccessfulTxPacketsPerSecond: 0.3321034435806065\nretriedTxPackets: 221\nretriedTxPacketsPerSecond: 0.10627310194579408\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1181\nsuccessfulRxPacketsPerSecond: 0.27232482373609734\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:38:41][350396222291716][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:38:41][350396222291716][877 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.416/316.416/316.416/0.000 ms\n [2025-09-07 10:38:41][350396222291716][877 ms][DEBUG] check_internet: online [2025-09-07 10:38:41][350396222291716][877 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:38:41][350396222291716][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396222291716\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4469\"}'\'' -e'"" [2025-09-07 10:38:41][350396222291716][877 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:38:41][350396222291716][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396222291716\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4469\"}'\'' -e'"" [2025-09-07 10:38:46][350396222291716][5626 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e08023f-974f-4bd0-9a17-ec8d596909c2","id":"QR_3e08023f-974f-4bd0-9a17-ec8d596909c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:38:46][350396222291716][5782 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-07 10:38:46][350396222291716][5782 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-07 10:38:46][350396222291716][5782 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:39:03][350938282049714][0 ms][INFO] === Request start === [2025-09-07 10:39:03][350938282049714][1 ms][DEBUG] START check_scloud [2025-09-07 10:39:03][350938282049714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:39:04][350938282049714][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 18850 4972 23697796 150036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:39:04][350938282049714][288 ms][DEBUG] targetPkg: running [2025-09-07 10:39:04][350938282049714][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 10:39:04][350938282049714][289 ms][DEBUG] START check_boot_completed [2025-09-07 10:39:04][350938282049714][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:39:04][350938282049714][335 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:39:04][350938282049714][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:39:04][350938282049714][413 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 10:39:04][350938282049714][413 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 10:39:04][350938282049714][413 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:39:04][350938282049714][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282049714\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8572\"}'\'' -e'"" [2025-09-07 10:39:04][350938282049714][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:39:04][350938282049714][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282049714\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8572\"}'\'' -e'"" [2025-09-07 10:39:07][350938282049714][3803 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2433e2c1-8fdd-4a8d-8928-704778b34caf","id":"QR_2433e2c1-8fdd-4a8d-8928-704778b34caf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:39:07][350938282049714][3959 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-07 10:39:07][350938282049714][3959 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-07 10:39:07][350938282049714][3959 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:39:10][350938282049714][0 ms][INFO] === Request start === [2025-09-07 10:39:10][350938282049714][1 ms][DEBUG] START check_scloud [2025-09-07 10:39:10][350938282049714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:39:10][350938282049714][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 18850 4972 23846888 160920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:39:10][350938282049714][252 ms][DEBUG] targetPkg: running [2025-09-07 10:39:10][350938282049714][252 ms][DEBUG] END check_scloud in 252 ms [2025-09-07 10:39:10][350938282049714][252 ms][DEBUG] START check_boot_completed [2025-09-07 10:39:10][350938282049714][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:39:10][350938282049714][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:39:10][350938282049714][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:39:10][350938282049714][393 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 10:39:10][350938282049714][393 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 10:39:10][350938282049714][393 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:39:10][350938282049714][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282049714\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1526\"}'\'' -e'"" [2025-09-07 10:39:10][350938282049714][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:39:10][350938282049714][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282049714\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1526\"}'\'' -e'"" [2025-09-07 10:39:15][350938282049714][5001 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bac13f6-cca1-4f56-95c1-69dc5a37ce1f","id":"QR_4bac13f6-cca1-4f56-95c1-69dc5a37ce1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:39:15][350938282049714][5157 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-07 10:39:15][350938282049714][5157 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-07 10:39:15][350938282049714][5157 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:39:19][358080745813089][0 ms][INFO] === Request start === [2025-09-07 10:39:19][358080745813089][1 ms][DEBUG] START check_scloud [2025-09-07 10:39:19][358080745813089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:39:19][358080745813089][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18850 4972 23991408 171184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:39:19][358080745813089][301 ms][DEBUG] targetPkg: running [2025-09-07 10:39:19][358080745813089][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 10:39:19][358080745813089][301 ms][DEBUG] START check_boot_completed [2025-09-07 10:39:19][358080745813089][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:39:19][358080745813089][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:39:19][358080745813089][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:39:19][358080745813089][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:39:19][358080745813089][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:39:19][358080745813089][411 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:39:19][358080745813089][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745813089\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8007\"}'\'' -e'"" [2025-09-07 10:39:19][358080745813089][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:39:19][358080745813089][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745813089\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8007\"}'\'' -e'"" [2025-09-07 10:39:25][358080745813089][5550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed8a17ca-b533-4e58-b93a-1c245863601d","id":"QR_ed8a17ca-b533-4e58-b93a-1c245863601d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:39:25][358080745813089][5706 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 10:39:25][358080745813089][5706 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-07 10:39:25][358080745813089][5706 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:39:27][358080745813089][0 ms][INFO] === Request start === [2025-09-07 10:39:27][358080745813089][1 ms][DEBUG] START check_scloud [2025-09-07 10:39:27][358080745813089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:39:27][358080745813089][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 18850 4972 24115412 182936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:39:27][358080745813089][299 ms][DEBUG] targetPkg: running [2025-09-07 10:39:27][358080745813089][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-07 10:39:27][358080745813089][299 ms][DEBUG] START check_boot_completed [2025-09-07 10:39:27][358080745813089][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:39:27][358080745813089][344 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 10:39:27][358080745813089][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:39:27][358080745813089][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:39:27][358080745813089][391 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 10:39:27][358080745813089][391 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:39:27][358080745813089][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745813089\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9907\"}'\'' -e'"" [2025-09-07 10:39:27][358080745813089][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:39:27][358080745813089][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745813089\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9907\"}'\'' -e'"" [2025-09-07 10:39:33][358080745813089][5530 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d255d8b-c4f8-4f15-b2cc-d3d8c326f254","id":"QR_3d255d8b-c4f8-4f15-b2cc-d3d8c326f254","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:39:33][358080745813089][5686 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 10:39:33][358080745813089][5686 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-07 10:39:33][358080745813089][5686 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:41:03][352397451639375][1 ms][INFO] === Request start === [2025-09-07 10:41:03][352397451639375][1 ms][DEBUG] START check_scloud [2025-09-07 10:41:03][352397451639375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:41:04][352397451639375][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 18850 4972 24189220 194256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:41:04][352397451639375][297 ms][DEBUG] targetPkg: running [2025-09-07 10:41:04][352397451639375][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 10:41:04][352397451639375][297 ms][DEBUG] START check_boot_completed [2025-09-07 10:41:04][352397451639375][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:41:04][352397451639375][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:41:04][352397451639375][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:41:04][352397451639375][437 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 10:41:04][352397451639375][437 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 10:41:04][352397451639375][437 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:41:04][352397451639375][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451639375\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3431\"}'\'' -e'"" [2025-09-07 10:41:04][352397451639375][438 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:41:04][352397451639375][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451639375\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3431\"}'\'' -e'"" [2025-09-07 10:41:08][352397451639375][4983 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4cd0fda-9f8c-424d-97fd-387d33f24bef","id":"QR_e4cd0fda-9f8c-424d-97fd-387d33f24bef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:41:09][352397451639375][5139 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-07 10:41:09][352397451639375][5139 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-07 10:41:09][352397451639375][5139 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:41:11][352397451639375][0 ms][INFO] === Request start === [2025-09-07 10:41:11][352397451639375][1 ms][DEBUG] START check_scloud [2025-09-07 10:41:11][352397451639375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:41:11][352397451639375][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 18850 4972 24348076 205992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:41:11][352397451639375][256 ms][DEBUG] targetPkg: running [2025-09-07 10:41:11][352397451639375][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-07 10:41:11][352397451639375][256 ms][DEBUG] START check_boot_completed [2025-09-07 10:41:11][352397451639375][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:41:11][352397451639375][286 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 10:41:11][352397451639375][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:41:11][352397451639375][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:41:11][352397451639375][333 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 10:41:11][352397451639375][333 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:41:11][352397451639375][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451639375\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-09-07 10:41:11][352397451639375][333 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:41:11][352397451639375][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451639375\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-09-07 10:41:16][352397451639375][5581 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b529387-f79a-4e6b-a8a4-4d9be4741422","id":"QR_4b529387-f79a-4e6b-a8a4-4d9be4741422","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:41:17][352397451639375][5737 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-07 10:41:17][352397451639375][5737 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-07 10:41:17][352397451639375][5737 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:47:03][358434271509563][1 ms][INFO] === Request start === [2025-09-07 10:47:03][358434271509563][1 ms][DEBUG] START check_scloud [2025-09-07 10:47:03][358434271509563][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:47:03][358434271509563][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 18850 4972 24485512 217652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:47:03][358434271509563][246 ms][DEBUG] targetPkg: running [2025-09-07 10:47:03][358434271509563][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-07 10:47:03][358434271509563][246 ms][DEBUG] START check_boot_completed [2025-09-07 10:47:03][358434271509563][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:47:03][358434271509563][293 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:47:03][358434271509563][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:47:03][358434271509563][355 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:47:03][358434271509563][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:47:03][358434271509563][355 ms][DEBUG] rawBody.length=1149 [2025-09-07 10:47:03][358434271509563][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358434271509563\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9389\"}'\'' -e'"" [2025-09-07 10:47:03][358434271509563][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:47:03][358434271509563][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358434271509563\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9389\"}'\'' -e'"" [2025-09-07 10:47:08][358434271509563][4979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8cfd1f6-659f-4852-8a4f-951a005a9737","id":"QR_a8cfd1f6-659f-4852-8a4f-951a005a9737","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:47:08][358434271509563][5135 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-07 10:47:08][358434271509563][5135 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-07 10:47:08][358434271509563][5135 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:47:11][358434271509563][0 ms][INFO] === Request start === [2025-09-07 10:47:11][358434271509563][1 ms][DEBUG] START check_scloud [2025-09-07 10:47:11][358434271509563][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:47:11][358434271509563][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18850 4972 24612872 229724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:47:11][358434271509563][307 ms][DEBUG] targetPkg: running [2025-09-07 10:47:11][358434271509563][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 10:47:11][358434271509563][307 ms][DEBUG] START check_boot_completed [2025-09-07 10:47:11][358434271509563][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:47:11][358434271509563][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:47:11][358434271509563][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:47:11][358434271509563][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:47:11][358434271509563][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 10:47:11][358434271509563][401 ms][DEBUG] rawBody.length=1159 [2025-09-07 10:47:11][358434271509563][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358434271509563\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7308\"}'\'' -e'"" [2025-09-07 10:47:11][358434271509563][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:47:11][358434271509563][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358434271509563\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7308\"}'\'' -e'"" [2025-09-07 10:47:16][358434271509563][5399 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73c4f37b-d61a-47de-be90-dea2ccf2ecc3","id":"QR_73c4f37b-d61a-47de-be90-dea2ccf2ecc3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:47:16][358434271509563][5556 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-07 10:47:16][358434271509563][5556 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-07 10:47:16][358434271509563][5556 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:48:03][358780103039215][0 ms][INFO] === Request start === [2025-09-07 10:48:03][358780103039215][1 ms][DEBUG] START check_scloud [2025-09-07 10:48:03][358780103039215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:48:03][358780103039215][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 18850 4972 24740044 240868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:48:03][358780103039215][269 ms][DEBUG] targetPkg: running [2025-09-07 10:48:03][358780103039215][269 ms][DEBUG] END check_scloud in 269 ms [2025-09-07 10:48:03][358780103039215][269 ms][DEBUG] START check_boot_completed [2025-09-07 10:48:03][358780103039215][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:48:03][358780103039215][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:48:03][358780103039215][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:48:03][358780103039215][394 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 10:48:03][358780103039215][394 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 10:48:03][358780103039215][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:48:03][358780103039215][503 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1507\nsuccessfulTxPacketsPerSecond: 0.5626030796738444\nretriedTxPackets: 301\nretriedTxPacketsPerSecond: 0.12331026403810287\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1448\nsuccessfulRxPacketsPerSecond: 0.4778272731476486\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:48:03][358780103039215][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:48:04][358780103039215][1831 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.430/302.430/302.430/0.000 ms\n [2025-09-07 10:48:04][358780103039215][1831 ms][DEBUG] check_internet: online [2025-09-07 10:48:04][358780103039215][1831 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:48:04][358780103039215][1831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780103039215\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9126\"}'\'' -e'"" [2025-09-07 10:48:04][358780103039215][1832 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:48:04][358780103039215][1832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780103039215\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9126\"}'\'' -e'"" [2025-09-07 10:48:09][358780103039215][5940 ms][DEBUG] proc_open done in 4108 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 10:48:09][358780103039215][5940 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-07 10:48:09][358780103039215][5940 ms][WARN] Detected error: Process with pid 18850 either refused to load frida-agent, or terminated during injectionProcess with pid 18850 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 10:48:09][358780103039215][5940 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 10:48:09][358780103039215][6221 ms][DEBUG] SU: done in 281 ms; outsystem 5395 4972 12795340 211784 0 0 R system_server\n [2025-09-07 10:48:09][358780103039215][6221 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 10:48:09][358780103039215][6377 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 10:48:09][358780103039215][6377 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 10:48:09][358780103039215][6377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 10:48:09][358780103039215][6502 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 10:48:09][358780103039215][6502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 10:48:09][358780103039215][6658 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 10:48:11][358780103039215][8673 ms][DEBUG] START check_boot_completed [2025-09-07 10:48:11][358780103039215][8673 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:48:11][358780103039215][8720 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:48:11][358780103039215][8720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:48:11][358780103039215][8783 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:48:11][358780103039215][8783 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 10:48:14][358780103039215][11797 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 10:48:14][358780103039215][11798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780103039215\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9126\"}'\'' -e'"" [2025-09-07 10:48:18][358780103039215][15578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bde17673-5460-4c98-8d54-24795361efd6","id":"QR_bde17673-5460-4c98-8d54-24795361efd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:48:18][358780103039215][15734 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-07 10:48:18][358780103039215][15734 ms][DEBUG] END runCmdUntilRes#2 in 3937 ms [2025-09-07 10:48:18][358780103039215][15734 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:48:21][358780103039215][0 ms][INFO] === Request start === [2025-09-07 10:48:21][358780103039215][1 ms][DEBUG] START check_scloud [2025-09-07 10:48:21][358780103039215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:48:21][358780103039215][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 20564 4972 23528608 124804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:48:21][358780103039215][257 ms][DEBUG] targetPkg: running [2025-09-07 10:48:21][358780103039215][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-07 10:48:21][358780103039215][257 ms][DEBUG] START check_boot_completed [2025-09-07 10:48:21][358780103039215][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:48:21][358780103039215][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:48:21][358780103039215][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:48:21][358780103039215][381 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 10:48:21][358780103039215][382 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 10:48:21][358780103039215][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:48:21][358780103039215][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1768\nsuccessfulTxPacketsPerSecond: 0.8647423664122137\nretriedTxPackets: 345\nretriedTxPacketsPerSecond: 0.14578032230703986\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1649\nsuccessfulRxPacketsPerSecond: 0.6659510178117048\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:48:21][358780103039215][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:48:22][358780103039215][928 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.477/294.477/294.477/0.000 ms\n [2025-09-07 10:48:22][358780103039215][928 ms][DEBUG] check_internet: online [2025-09-07 10:48:22][358780103039215][928 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:48:22][358780103039215][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780103039215\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2499\"}'\'' -e'"" [2025-09-07 10:48:22][358780103039215][929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:48:22][358780103039215][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780103039215\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2499\"}'\'' -e'"" [2025-09-07 10:48:27][358780103039215][6317 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12c3bee5-5270-4c1a-ab2c-5e753d361eea","id":"QR_12c3bee5-5270-4c1a-ab2c-5e753d361eea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:48:27][358780103039215][6474 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-07 10:48:27][358780103039215][6474 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-07 10:48:27][358780103039215][6474 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:49:03][351495041039493][0 ms][INFO] === Request start === [2025-09-07 10:49:03][351495041039493][1 ms][DEBUG] START check_scloud [2025-09-07 10:49:03][351495041039493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:49:03][351495041039493][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 20564 4972 23622652 138620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:49:03][351495041039493][304 ms][DEBUG] targetPkg: running [2025-09-07 10:49:03][351495041039493][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 10:49:03][351495041039493][304 ms][DEBUG] START check_boot_completed [2025-09-07 10:49:03][351495041039493][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:49:03][351495041039493][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 10:49:03][351495041039493][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:49:03][351495041039493][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 10:49:03][351495041039493][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 10:49:03][351495041039493][414 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:49:03][351495041039493][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351495041039493\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5265\"}'\'' -e'"" [2025-09-07 10:49:03][351495041039493][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:49:03][351495041039493][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351495041039493\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5265\"}'\'' -e'"" [2025-09-07 10:49:07][351495041039493][3881 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16daed1f-82f2-47c5-af53-8e0957ba3322","id":"QR_16daed1f-82f2-47c5-af53-8e0957ba3322","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:49:07][351495041039493][4038 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-09-07 10:49:07][351495041039493][4038 ms][DEBUG] END runCmdUntilRes#1 in 3623 ms [2025-09-07 10:49:07][351495041039493][4038 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:49:09][351495041039493][1 ms][INFO] === Request start === [2025-09-07 10:49:09][351495041039493][1 ms][DEBUG] START check_scloud [2025-09-07 10:49:09][351495041039493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:49:09][351495041039493][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 20564 4972 23754948 150308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:49:09][351495041039493][283 ms][DEBUG] targetPkg: running [2025-09-07 10:49:09][351495041039493][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-07 10:49:09][351495041039493][283 ms][DEBUG] START check_boot_completed [2025-09-07 10:49:09][351495041039493][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:49:09][351495041039493][329 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:49:09][351495041039493][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:49:09][351495041039493][378 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 10:49:09][351495041039493][378 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 10:49:09][351495041039493][378 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:49:09][351495041039493][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351495041039493\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2287\"}'\'' -e'"" [2025-09-07 10:49:09][351495041039493][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:49:09][351495041039493][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351495041039493\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2287\"}'\'' -e'"" [2025-09-07 10:49:14][351495041039493][5110 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a086662-5574-49d2-85c6-7e49280ee159","id":"QR_6a086662-5574-49d2-85c6-7e49280ee159","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:49:14][351495041039493][5266 ms][DEBUG] proc_open done in 4887 ms; code=255; res.len=3343 [2025-09-07 10:49:14][351495041039493][5266 ms][DEBUG] END runCmdUntilRes#1 in 4888 ms [2025-09-07 10:49:14][351495041039493][5266 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:58:03][354595806424090][1 ms][INFO] === Request start === [2025-09-07 10:58:03][354595806424090][1 ms][DEBUG] START check_scloud [2025-09-07 10:58:03][354595806424090][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:58:03][354595806424090][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 20564 4972 23830728 161788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:58:03][354595806424090][257 ms][DEBUG] targetPkg: running [2025-09-07 10:58:03][354595806424090][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-07 10:58:03][354595806424090][257 ms][DEBUG] START check_boot_completed [2025-09-07 10:58:03][354595806424090][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:58:03][354595806424090][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 10:58:03][354595806424090][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:58:03][354595806424090][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:58:03][354595806424090][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 10:58:03][354595806424090][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:58:03][354595806424090][429 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1921\nsuccessfulTxPacketsPerSecond: 0.2227247807017544\nretriedTxPackets: 387\nretriedTxPacketsPerSecond: 0.08566337719298246\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1785\nsuccessfulRxPacketsPerSecond: 0.15419407894736842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:58:03][354595806424090][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:58:05][354595806424090][1819 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.391/304.391/304.391/0.000 ms\n [2025-09-07 10:58:05][354595806424090][1819 ms][DEBUG] check_internet: online [2025-09-07 10:58:05][354595806424090][1819 ms][DEBUG] rawBody.length=1150 [2025-09-07 10:58:05][354595806424090][1820 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595806424090\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-09-07 10:58:05][354595806424090][1820 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:58:05][354595806424090][1820 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595806424090\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-09-07 10:58:08][354595806424090][5568 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1b4589e-6aed-49d3-b758-13353efc7d33","id":"QR_f1b4589e-6aed-49d3-b758-13353efc7d33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:58:08][354595806424090][5724 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-09-07 10:58:08][354595806424090][5725 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-07 10:58:08][354595806424090][5725 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 10:58:11][354595806424090][0 ms][INFO] === Request start === [2025-09-07 10:58:11][354595806424090][1 ms][DEBUG] START check_scloud [2025-09-07 10:58:11][354595806424090][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 10:58:11][354595806424090][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 20564 4972 23994908 172788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 10:58:11][354595806424090][303 ms][DEBUG] targetPkg: running [2025-09-07 10:58:11][354595806424090][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 10:58:11][354595806424090][303 ms][DEBUG] START check_boot_completed [2025-09-07 10:58:11][354595806424090][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 10:58:11][354595806424090][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 10:58:11][354595806424090][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 10:58:11][354595806424090][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 10:58:11][354595806424090][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 10:58:11][354595806424090][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 10:58:11][354595806424090][507 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1921\nsuccessfulTxPacketsPerSecond: 0.2227247807017544\nretriedTxPackets: 387\nretriedTxPacketsPerSecond: 0.08566337719298246\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1785\nsuccessfulRxPacketsPerSecond: 0.15419407894736842\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 10:58:11][354595806424090][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 10:58:12][354595806424090][864 ms][DEBUG] SU: done in 357 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.225/223.225/223.225/0.000 ms\n [2025-09-07 10:58:12][354595806424090][865 ms][DEBUG] check_internet: online [2025-09-07 10:58:12][354595806424090][865 ms][DEBUG] rawBody.length=1160 [2025-09-07 10:58:12][354595806424090][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595806424090\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5172\"}'\'' -e'"" [2025-09-07 10:58:12][354595806424090][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 10:58:12][354595806424090][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595806424090\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5172\"}'\'' -e'"" [2025-09-07 10:58:17][354595806424090][6332 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b45cc5bc-4e1d-42a4-9038-0e43ee958ecc","id":"QR_b45cc5bc-4e1d-42a4-9038-0e43ee958ecc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 10:58:17][354595806424090][6488 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-07 10:58:17][354595806424090][6488 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-09-07 10:58:17][354595806424090][6488 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:02:03][356007116680898][1 ms][INFO] === Request start === [2025-09-07 11:02:03][356007116680898][1 ms][DEBUG] START check_scloud [2025-09-07 11:02:03][356007116680898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:02:03][356007116680898][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 20564 4972 24090332 184804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:02:03][356007116680898][305 ms][DEBUG] targetPkg: running [2025-09-07 11:02:03][356007116680898][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 11:02:03][356007116680898][305 ms][DEBUG] START check_boot_completed [2025-09-07 11:02:03][356007116680898][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:02:03][356007116680898][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:02:03][356007116680898][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:02:03][356007116680898][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:02:03][356007116680898][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:02:03][356007116680898][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:02:03][356007116680898][508 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 0.32798283993781446\nretriedTxPackets: 407\nretriedTxPacketsPerSecond: 0.06559656798756289\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1878\nsuccessfulRxPacketsPerSecond: 0.30502404114216747\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:02:03][356007116680898][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:02:04][356007116680898][946 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.335/289.335/289.335/0.000 ms\n [2025-09-07 11:02:04][356007116680898][946 ms][DEBUG] check_internet: online [2025-09-07 11:02:04][356007116680898][946 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:02:04][356007116680898][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007116680898\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3476\"}'\'' -e'"" [2025-09-07 11:02:04][356007116680898][946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:02:04][356007116680898][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007116680898\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3476\"}'\'' -e'"" [2025-09-07 11:02:08][356007116680898][5663 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfaa5dbf-f82b-4bae-a588-c0ff1fab39bd","id":"QR_bfaa5dbf-f82b-4bae-a588-c0ff1fab39bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:02:09][356007116680898][5819 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-07 11:02:09][356007116680898][5819 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-07 11:02:09][356007116680898][5820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:02:11][356007116680898][0 ms][INFO] === Request start === [2025-09-07 11:02:11][356007116680898][1 ms][DEBUG] START check_scloud [2025-09-07 11:02:11][356007116680898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:02:11][356007116680898][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 20564 4972 24234852 195568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:02:11][356007116680898][303 ms][DEBUG] targetPkg: running [2025-09-07 11:02:11][356007116680898][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 11:02:11][356007116680898][304 ms][DEBUG] START check_boot_completed [2025-09-07 11:02:11][356007116680898][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:02:11][356007116680898][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:02:11][356007116680898][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:02:11][356007116680898][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:02:11][356007116680898][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:02:11][356007116680898][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:02:11][356007116680898][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2021\nsuccessfulTxPacketsPerSecond: 0.32798283993781446\nretriedTxPackets: 407\nretriedTxPacketsPerSecond: 0.06559656798756289\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1878\nsuccessfulRxPacketsPerSecond: 0.30502404114216747\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:02:11][356007116680898][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:02:12][356007116680898][912 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.704/298.704/298.704/0.000 ms\n [2025-09-07 11:02:12][356007116680898][913 ms][DEBUG] check_internet: online [2025-09-07 11:02:12][356007116680898][913 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:02:12][356007116680898][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007116680898\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9098\"}'\'' -e'"" [2025-09-07 11:02:12][356007116680898][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:02:12][356007116680898][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007116680898\",\"model\":\"SM-G980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9098\"}'\'' -e'"" [2025-09-07 11:02:17][356007116680898][6146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6279a9f2-cf86-4d17-9e62-c5df09a79133","id":"QR_6279a9f2-cf86-4d17-9e62-c5df09a79133","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:02:17][356007116680898][6302 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-07 11:02:17][356007116680898][6302 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-07 11:02:17][356007116680898][6302 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:03:03][355399271054725][0 ms][INFO] === Request start === [2025-09-07 11:03:03][355399271054725][1 ms][DEBUG] START check_scloud [2025-09-07 11:03:03][355399271054725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:03:03][355399271054725][325 ms][DEBUG] SU: done in 325 ms; outu0_a118 20564 4972 24370596 206332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:03:03][355399271054725][325 ms][DEBUG] targetPkg: running [2025-09-07 11:03:03][355399271054725][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-07 11:03:03][355399271054725][325 ms][DEBUG] START check_boot_completed [2025-09-07 11:03:03][355399271054725][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:03:03][355399271054725][357 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:03:03][355399271054725][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:03:03][355399271054725][405 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 11:03:03][355399271054725][405 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 11:03:03][355399271054725][405 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:03:03][355399271054725][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399271054725\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3508\"}'\'' -e'"" [2025-09-07 11:03:03][355399271054725][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:03:03][355399271054725][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399271054725\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3508\"}'\'' -e'"" [2025-09-07 11:03:07][355399271054725][3981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f32aadf-bede-4976-9e5a-13c113adf012","id":"QR_6f32aadf-bede-4976-9e5a-13c113adf012","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:03:07][355399271054725][4137 ms][DEBUG] proc_open done in 3732 ms; code=255; res.len=3343 [2025-09-07 11:03:07][355399271054725][4137 ms][DEBUG] END runCmdUntilRes#1 in 3732 ms [2025-09-07 11:03:07][355399271054725][4137 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:03:09][355399271054725][0 ms][INFO] === Request start === [2025-09-07 11:03:09][355399271054725][1 ms][DEBUG] START check_scloud [2025-09-07 11:03:09][355399271054725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:03:09][355399271054725][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 20564 4972 24519212 206384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:03:09][355399271054725][323 ms][DEBUG] targetPkg: running [2025-09-07 11:03:09][355399271054725][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 11:03:09][355399271054725][323 ms][DEBUG] START check_boot_completed [2025-09-07 11:03:09][355399271054725][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:03:09][355399271054725][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:03:09][355399271054725][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:03:10][355399271054725][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:03:10][355399271054725][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:03:10][355399271054725][416 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:03:10][355399271054725][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399271054725\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4747\"}'\'' -e'"" [2025-09-07 11:03:10][355399271054725][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:03:10][355399271054725][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355399271054725\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4747\"}'\'' -e'"" [2025-09-07 11:03:15][355399271054725][5508 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a82f9cc6-8e18-4eb5-9afb-0b59d8908a8a","id":"QR_a82f9cc6-8e18-4eb5-9afb-0b59d8908a8a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:03:15][355399271054725][5665 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-07 11:03:15][355399271054725][5665 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-07 11:03:15][355399271054725][5665 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:03:45][357950542452680][0 ms][INFO] === Request start === [2025-09-07 11:03:45][357950542452680][1 ms][DEBUG] START check_scloud [2025-09-07 11:03:45][357950542452680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:03:45][357950542452680][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 20564 4972 24663660 194888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:03:45][357950542452680][326 ms][DEBUG] targetPkg: running [2025-09-07 11:03:45][357950542452680][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-07 11:03:45][357950542452680][326 ms][DEBUG] START check_boot_completed [2025-09-07 11:03:45][357950542452680][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:03:46][357950542452680][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:03:46][357950542452680][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:03:46][357950542452680][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:03:46][357950542452680][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:03:46][357950542452680][419 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:03:46][357950542452680][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2851\"}'\'' -e'"" [2025-09-07 11:03:46][357950542452680][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:03:46][357950542452680][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2851\"}'\'' -e'"" [2025-09-07 11:03:50][357950542452680][4793 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-07 11:03:50][357950542452680][4949 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=107 [2025-09-07 11:03:50][357950542452680][4949 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-07 11:03:50][357950542452680][4949 ms][INFO] SUCCESS response from frida (len=107) [2025-09-07 11:03:50][][0 ms][INFO] === Request start === [2025-09-07 11:03:50][][1 ms][DEBUG] START check_scloud [2025-09-07 11:03:50][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:03:51][][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 20564 4972 24845048 205688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:03:51][][308 ms][DEBUG] targetPkg: running [2025-09-07 11:03:51][][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 11:03:51][][308 ms][DEBUG] START check_boot_completed [2025-09-07 11:03:51][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:03:51][][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:03:51][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:03:51][][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 11:03:51][][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 11:03:51][][403 ms][DEBUG] rawBody.length=1131 [2025-09-07 11:03:51][][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TB0HS4ED\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-09-07 11:03:51][][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:03:51][][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TB0HS4ED\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-09-07 11:03:55][][4494 ms][DEBUG] proc_open done in 4091 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 11:03:55][][4494 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-07 11:03:55][][4495 ms][WARN] Detected error: Process with pid 20564 either refused to load frida-agent, or terminated during injectionProcess with pid 20564 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 11:03:55][][4495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 11:03:55][][4775 ms][DEBUG] SU: done in 280 ms; outsystem 5395 4972 12825192 197640 ep_poll 0 S system_server\n [2025-09-07 11:03:55][][4775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 11:03:55][][4900 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 11:03:55][][4900 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 11:03:55][][4900 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 11:03:55][][5025 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 11:03:55][][5025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 11:03:56][][5228 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 11:03:58][][7243 ms][DEBUG] START check_boot_completed [2025-09-07 11:03:58][][7243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:03:58][][7290 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:03:58][][7290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:03:58][][7337 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:03:58][][7337 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:04:01][][10352 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 11:04:01][][10352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TB0HS4ED\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7337\"}'\'' -e'"" [2025-09-07 11:04:04][][13539 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-07 11:04:04][][13695 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=95 [2025-09-07 11:04:04][][13695 ms][DEBUG] END runCmdUntilRes#2 in 3343 ms [2025-09-07 11:04:04][][13695 ms][INFO] SUCCESS response from frida (len=95) [2025-09-07 11:04:06][357950542452680][1 ms][INFO] === Request start === [2025-09-07 11:04:06][357950542452680][1 ms][DEBUG] START check_scloud [2025-09-07 11:04:06][357950542452680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:04:06][357950542452680][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 22570 4972 23533088 122908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:04:06][357950542452680][266 ms][DEBUG] targetPkg: running [2025-09-07 11:04:06][357950542452680][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-07 11:04:06][357950542452680][266 ms][DEBUG] START check_boot_completed [2025-09-07 11:04:06][357950542452680][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:04:06][357950542452680][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:04:06][357950542452680][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:04:06][357950542452680][391 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 11:04:06][357950542452680][391 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 11:04:06][357950542452680][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:04:06][357950542452680][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2080\nsuccessfulTxPacketsPerSecond: 0.49214240432418005\nretriedTxPackets: 420\nretriedTxPacketsPerSecond: 0.10843815688498883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1931\nsuccessfulRxPacketsPerSecond: 0.442094024223416\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:04:06][357950542452680][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:04:07][357950542452680][1000 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.044/219.044/219.044/0.000 ms\n [2025-09-07 11:04:07][357950542452680][1000 ms][DEBUG] check_internet: online [2025-09-07 11:04:07][357950542452680][1000 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:04:07][357950542452680][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5030\"}'\'' -e'"" [2025-09-07 11:04:07][357950542452680][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:04:07][357950542452680][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5030\"}'\'' -e'"" [2025-09-07 11:04:12][357950542452680][6389 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad0c586e-63bc-4f4e-873e-2f5148a446fd","id":"QR_ad0c586e-63bc-4f4e-873e-2f5148a446fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:04:12][357950542452680][6545 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-07 11:04:12][357950542452680][6545 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-07 11:04:12][357950542452680][6546 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:04:29][357950542452680][0 ms][INFO] === Request start === [2025-09-07 11:04:29][357950542452680][1 ms][DEBUG] START check_scloud [2025-09-07 11:04:29][357950542452680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:04:30][357950542452680][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22570 4972 23617020 136984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:04:30][357950542452680][309 ms][DEBUG] targetPkg: running [2025-09-07 11:04:30][357950542452680][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 11:04:30][357950542452680][309 ms][DEBUG] START check_boot_completed [2025-09-07 11:04:30][357950542452680][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:04:30][357950542452680][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:04:30][357950542452680][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:04:30][357950542452680][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:04:30][357950542452680][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:04:30][357950542452680][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:04:30][357950542452680][512 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2080\nsuccessfulTxPacketsPerSecond: 0.49214240432418005\nretriedTxPackets: 420\nretriedTxPacketsPerSecond: 0.10843815688498883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1931\nsuccessfulRxPacketsPerSecond: 0.442094024223416\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:04:30][357950542452680][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:04:30][357950542452680][934 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.382/316.382/316.382/0.000 ms\n [2025-09-07 11:04:30][357950542452680][934 ms][DEBUG] check_internet: online [2025-09-07 11:04:30][357950542452680][934 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:04:30][357950542452680][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3933\"}'\'' -e'"" [2025-09-07 11:04:30][357950542452680][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:04:30][357950542452680][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3933\"}'\'' -e'"" [2025-09-07 11:04:33][357950542452680][3980 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-07 11:04:33][357950542452680][4136 ms][DEBUG] proc_open done in 3202 ms; code=255; res.len=107 [2025-09-07 11:04:33][357950542452680][4136 ms][DEBUG] END runCmdUntilRes#1 in 3202 ms [2025-09-07 11:04:33][357950542452680][4136 ms][INFO] SUCCESS response from frida (len=107) [2025-09-07 11:04:34][][0 ms][INFO] === Request start === [2025-09-07 11:04:34][][1 ms][DEBUG] START check_scloud [2025-09-07 11:04:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:04:34][][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 22570 4972 23788164 148716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:04:34][][271 ms][DEBUG] targetPkg: running [2025-09-07 11:04:34][][271 ms][DEBUG] END check_scloud in 271 ms [2025-09-07 11:04:34][][271 ms][DEBUG] START check_boot_completed [2025-09-07 11:04:34][][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:04:34][][318 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:04:34][][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:04:34][][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:04:34][][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:04:34][][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:04:34][][458 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2080\nsuccessfulTxPacketsPerSecond: 0.49214240432418005\nretriedTxPackets: 420\nretriedTxPacketsPerSecond: 0.10843815688498883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1931\nsuccessfulRxPacketsPerSecond: 0.442094024223416\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:04:34][][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:04:34][][787 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.301/219.301/219.301/0.000 ms\n [2025-09-07 11:04:34][][787 ms][DEBUG] check_internet: online [2025-09-07 11:04:34][][787 ms][DEBUG] rawBody.length=1131 [2025-09-07 11:04:34][][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TB0HS4ED\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3923\"}'\'' -e'"" [2025-09-07 11:04:34][][787 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:04:34][][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TB0HS4ED\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3923\"}'\'' -e'"" [2025-09-07 11:04:38][][3926 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-07 11:04:38][][4083 ms][DEBUG] proc_open done in 3295 ms; code=255; res.len=95 [2025-09-07 11:04:38][][4083 ms][DEBUG] END runCmdUntilRes#1 in 3296 ms [2025-09-07 11:04:38][][4083 ms][INFO] SUCCESS response from frida (len=95) [2025-09-07 11:04:39][357950542452680][0 ms][INFO] === Request start === [2025-09-07 11:04:39][357950542452680][1 ms][DEBUG] START check_scloud [2025-09-07 11:04:39][357950542452680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:04:40][357950542452680][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22570 4972 23938892 159820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:04:40][357950542452680][308 ms][DEBUG] targetPkg: running [2025-09-07 11:04:40][357950542452680][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 11:04:40][357950542452680][308 ms][DEBUG] START check_boot_completed [2025-09-07 11:04:40][357950542452680][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:04:40][357950542452680][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:04:40][357950542452680][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:04:40][357950542452680][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:04:40][357950542452680][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:04:40][357950542452680][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:04:40][357950542452680][542 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2080\nsuccessfulTxPacketsPerSecond: 0.49214240432418005\nretriedTxPackets: 420\nretriedTxPacketsPerSecond: 0.10843815688498883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1931\nsuccessfulRxPacketsPerSecond: 0.442094024223416\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:04:40][357950542452680][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:04:40][357950542452680][932 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.062/291.062/291.062/0.000 ms\n [2025-09-07 11:04:40][357950542452680][932 ms][DEBUG] check_internet: online [2025-09-07 11:04:40][357950542452680][932 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:04:40][357950542452680][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4215\"}'\'' -e'"" [2025-09-07 11:04:40][357950542452680][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:04:40][357950542452680][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950542452680\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4215\"}'\'' -e'"" [2025-09-07 11:04:45][357950542452680][5166 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fe5ac24-8ab0-4cc9-84be-e01d177304fd","id":"QR_0fe5ac24-8ab0-4cc9-84be-e01d177304fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:04:45][357950542452680][5322 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-07 11:04:45][357950542452680][5322 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-09-07 11:04:45][357950542452680][5322 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:05:03][354255811219502][0 ms][INFO] === Request start === [2025-09-07 11:05:03][354255811219502][1 ms][DEBUG] START check_scloud [2025-09-07 11:05:03][354255811219502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:05:03][354255811219502][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22570 4972 24042472 170764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:05:03][354255811219502][309 ms][DEBUG] targetPkg: running [2025-09-07 11:05:03][354255811219502][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 11:05:03][354255811219502][309 ms][DEBUG] START check_boot_completed [2025-09-07 11:05:03][354255811219502][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:05:03][354255811219502][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:05:03][354255811219502][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:05:03][354255811219502][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:05:03][354255811219502][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:05:03][354255811219502][418 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:05:03][354255811219502][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811219502\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5860\"}'\'' -e'"" [2025-09-07 11:05:03][354255811219502][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:05:03][354255811219502][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811219502\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5860\"}'\'' -e'"" [2025-09-07 11:05:08][354255811219502][4995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d59a8650-440d-4329-a4cf-2a7ceea0940d","id":"QR_d59a8650-440d-4329-a4cf-2a7ceea0940d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:05:08][354255811219502][5151 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-07 11:05:08][354255811219502][5151 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-07 11:05:08][354255811219502][5151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:05:10][354255811219502][0 ms][INFO] === Request start === [2025-09-07 11:05:10][354255811219502][1 ms][DEBUG] START check_scloud [2025-09-07 11:05:10][354255811219502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:05:11][354255811219502][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 22570 4972 24199280 182548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:05:11][354255811219502][305 ms][DEBUG] targetPkg: running [2025-09-07 11:05:11][354255811219502][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 11:05:11][354255811219502][306 ms][DEBUG] START check_boot_completed [2025-09-07 11:05:11][354255811219502][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:05:11][354255811219502][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:05:11][354255811219502][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:05:11][354255811219502][401 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 11:05:11][354255811219502][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 11:05:11][354255811219502][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:05:11][354255811219502][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811219502\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2421\"}'\'' -e'"" [2025-09-07 11:05:11][354255811219502][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:05:11][354255811219502][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811219502\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2421\"}'\'' -e'"" [2025-09-07 11:05:16][354255811219502][5366 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12ca7bf5-4a1c-4974-8ba0-11e304467d85","id":"QR_12ca7bf5-4a1c-4974-8ba0-11e304467d85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:05:16][354255811219502][5523 ms][DEBUG] proc_open done in 5122 ms; code=255; res.len=3343 [2025-09-07 11:05:16][354255811219502][5523 ms][DEBUG] END runCmdUntilRes#1 in 5122 ms [2025-09-07 11:05:16][354255811219502][5523 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:05:21][352624114205017][0 ms][INFO] === Request start === [2025-09-07 11:05:21][352624114205017][1 ms][DEBUG] START check_scloud [2025-09-07 11:05:21][352624114205017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:05:22][352624114205017][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22570 4972 24347896 193408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:05:22][352624114205017][305 ms][DEBUG] targetPkg: running [2025-09-07 11:05:22][352624114205017][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 11:05:22][352624114205017][305 ms][DEBUG] START check_boot_completed [2025-09-07 11:05:22][352624114205017][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:05:22][352624114205017][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:05:22][352624114205017][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:05:22][352624114205017][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:05:22][352624114205017][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:05:22][352624114205017][414 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:05:22][352624114205017][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352624114205017\",\"model\":\"SM-G981W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1355\"}'\'' -e'"" [2025-09-07 11:05:22][352624114205017][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:05:22][352624114205017][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352624114205017\",\"model\":\"SM-G981W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1355\"}'\'' -e'"" [2025-09-07 11:05:27][352624114205017][5413 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f62663b1-660d-43ab-bd62-045ba704e452","id":"QR_f62663b1-660d-43ab-bd62-045ba704e452","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:05:27][352624114205017][5569 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-07 11:05:27][352624114205017][5569 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-09-07 11:05:27][352624114205017][5569 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:05:30][352624114205017][0 ms][INFO] === Request start === [2025-09-07 11:05:30][352624114205017][1 ms][DEBUG] START check_scloud [2025-09-07 11:05:30][352624114205017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:05:31][352624114205017][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 22570 4972 24475996 205548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:05:31][352624114205017][304 ms][DEBUG] targetPkg: running [2025-09-07 11:05:31][352624114205017][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 11:05:31][352624114205017][304 ms][DEBUG] START check_boot_completed [2025-09-07 11:05:31][352624114205017][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:05:31][352624114205017][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:05:31][352624114205017][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:05:31][352624114205017][413 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 11:05:31][352624114205017][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:05:31][352624114205017][413 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:05:31][352624114205017][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352624114205017\",\"model\":\"SM-G981W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9431\"}'\'' -e'"" [2025-09-07 11:05:31][352624114205017][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:05:31][352624114205017][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352624114205017\",\"model\":\"SM-G981W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9431\"}'\'' -e'"" [2025-09-07 11:05:34][352624114205017][4053 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be104ca0-979e-4d16-b7bd-812de7f0d927","id":"QR_be104ca0-979e-4d16-b7bd-812de7f0d927","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:05:35][352624114205017][4209 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-07 11:05:35][352624114205017][4209 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-07 11:05:35][352624114205017][4209 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:10:03][356019742897077][1 ms][INFO] === Request start === [2025-09-07 11:10:03][356019742897077][1 ms][DEBUG] START check_scloud [2025-09-07 11:10:03][356019742897077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:10:04][356019742897077][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 22570 4972 24565128 216732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:10:04][356019742897077][304 ms][DEBUG] targetPkg: running [2025-09-07 11:10:04][356019742897077][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 11:10:04][356019742897077][304 ms][DEBUG] START check_boot_completed [2025-09-07 11:10:04][356019742897077][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:10:04][356019742897077][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:10:04][356019742897077][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:10:04][356019742897077][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:10:04][356019742897077][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:10:04][356019742897077][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:10:04][356019742897077][492 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2407\nsuccessfulTxPacketsPerSecond: 1.084048573332405\nretriedTxPackets: 508\nretriedTxPacketsPerSecond: 0.2917317261567329\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2207\nsuccessfulRxPacketsPerSecond: 0.9149767774915712\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:10:04][356019742897077][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:10:05][356019742897077][1866 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.495/305.495/305.495/0.000 ms\n [2025-09-07 11:10:05][356019742897077][1867 ms][DEBUG] check_internet: online [2025-09-07 11:10:05][356019742897077][1867 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:10:05][356019742897077][1867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742897077\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2834\"}'\'' -e'"" [2025-09-07 11:10:05][356019742897077][1867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:10:05][356019742897077][1867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742897077\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2834\"}'\'' -e'"" [2025-09-07 11:10:09][356019742897077][5600 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84e8c30f-378f-4cf2-9b30-fa3cceeaaebc","id":"QR_84e8c30f-378f-4cf2-9b30-fa3cceeaaebc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:10:09][356019742897077][5756 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-07 11:10:09][356019742897077][5756 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-07 11:10:09][356019742897077][5756 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:10:11][356019742897077][0 ms][INFO] === Request start === [2025-09-07 11:10:11][356019742897077][1 ms][DEBUG] START check_scloud [2025-09-07 11:10:11][356019742897077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:10:12][356019742897077][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 22570 4972 24730128 228492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:10:12][356019742897077][303 ms][DEBUG] targetPkg: running [2025-09-07 11:10:12][356019742897077][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 11:10:12][356019742897077][303 ms][DEBUG] START check_boot_completed [2025-09-07 11:10:12][356019742897077][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:10:12][356019742897077][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:10:12][356019742897077][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:10:12][356019742897077][428 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 11:10:12][356019742897077][428 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 11:10:12][356019742897077][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:10:12][356019742897077][537 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2407\nsuccessfulTxPacketsPerSecond: 1.084048573332405\nretriedTxPackets: 508\nretriedTxPacketsPerSecond: 0.2917317261567329\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2207\nsuccessfulRxPacketsPerSecond: 0.9149767774915712\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:10:12][356019742897077][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:10:12][356019742897077][959 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.425/318.425/318.425/0.000 ms\n [2025-09-07 11:10:12][356019742897077][960 ms][DEBUG] check_internet: online [2025-09-07 11:10:12][356019742897077][960 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:10:12][356019742897077][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742897077\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9867\"}'\'' -e'"" [2025-09-07 11:10:12][356019742897077][960 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:10:12][356019742897077][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019742897077\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9867\"}'\'' -e'"" [2025-09-07 11:10:18][356019742897077][6223 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bce13949-c96d-4b0d-afac-c5053e565851","id":"QR_bce13949-c96d-4b0d-afac-c5053e565851","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:10:18][356019742897077][6379 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-07 11:10:18][356019742897077][6380 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-07 11:10:18][356019742897077][6380 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:12:04][352349694894804][1 ms][INFO] === Request start === [2025-09-07 11:12:04][352349694894804][1 ms][DEBUG] START check_scloud [2025-09-07 11:12:04][352349694894804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:12:04][352349694894804][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 22570 4972 24853200 239204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:12:04][352349694894804][310 ms][DEBUG] targetPkg: running [2025-09-07 11:12:04][352349694894804][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 11:12:04][352349694894804][310 ms][DEBUG] START check_boot_completed [2025-09-07 11:12:04][352349694894804][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:12:04][352349694894804][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:12:04][352349694894804][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:12:05][352349694894804][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:12:05][352349694894804][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:12:05][352349694894804][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:12:05][352349694894804][575 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30354 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2407\nsuccessfulTxPacketsPerSecond: 1.084048573332405\nretriedTxPackets: 508\nretriedTxPacketsPerSecond: 0.2917317261567329\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2207\nsuccessfulRxPacketsPerSecond: 0.9149767774915712\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:12:05][352349694894804][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:12:05][352349694894804][1013 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.705/300.705/300.705/0.000 ms\n [2025-09-07 11:12:05][352349694894804][1013 ms][DEBUG] check_internet: online [2025-09-07 11:12:05][352349694894804][1014 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:12:05][352349694894804][1014 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349694894804\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2585\"}'\'' -e'"" [2025-09-07 11:12:05][352349694894804][1014 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:12:05][352349694894804][1014 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349694894804\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2585\"}'\'' -e'"" [2025-09-07 11:12:09][352349694894804][4746 ms][DEBUG] proc_open done in 3732 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 11:12:09][352349694894804][4746 ms][DEBUG] END runCmdUntilRes#1 in 3732 ms [2025-09-07 11:12:09][352349694894804][4746 ms][WARN] Detected error: Process with pid 22570 either refused to load frida-agent, or terminated during injectionProcess with pid 22570 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 11:12:09][352349694894804][4746 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 11:12:09][352349694894804][5012 ms][DEBUG] SU: done in 266 ms; outsystem 5395 4972 12842628 189108 ep_poll 0 S system_server\nsystem 23950 1 12510420 114268 ptrace_stop 0 t system_server\n [2025-09-07 11:12:09][352349694894804][5012 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 11:12:09][352349694894804][5136 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 11:12:09][352349694894804][5136 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 11:12:09][352349694894804][5136 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 11:12:09][352349694894804][5248 ms][DEBUG] SU: done in 112 ms; out [2025-09-07 11:12:09][352349694894804][5248 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 11:12:10][352349694894804][5434 ms][DEBUG] SU: done in 186 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 11:12:12][352349694894804][7448 ms][DEBUG] START check_boot_completed [2025-09-07 11:12:12][352349694894804][7449 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:12:12][352349694894804][7495 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:12:12][352349694894804][7495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:12:12][352349694894804][7542 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:12:12][352349694894804][7542 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:12:15][352349694894804][10557 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 11:12:15][352349694894804][10557 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349694894804\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2585\"}'\'' -e'"" [2025-09-07 11:12:15][352349694894804][11120 ms][DEBUG] proc_open done in 562 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-07 11:12:15][352349694894804][11120 ms][DEBUG] END runCmdUntilRes#2 in 563 ms [2025-09-07 11:12:15][352349694894804][11120 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-07 11:12:15][352349694894804][11120 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 11:12:15][352349694894804][11401 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 11:13:05][352349694894804][1 ms][INFO] === Request start === [2025-09-07 11:13:05][352349694894804][1 ms][DEBUG] START check_scloud [2025-09-07 11:13:05][352349694894804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:13:05][352349694894804][486 ms][DEBUG] SU: done in 485 ms; out [2025-09-07 11:13:05][352349694894804][487 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 11:13:05][352349694894804][532 ms][DEBUG] ADB: done in 45 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 11:13:05][352349694894804][532 ms][DEBUG] check_devices: device found [2025-09-07 11:13:05][352349694894804][532 ms][WARN] targetPkg: not running, restarting [2025-09-07 11:13:05][352349694894804][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 11:13:05][352349694894804][657 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 11:13:05][352349694894804][657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 11:13:06][352349694894804][861 ms][DEBUG] SU: done in 204 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 11:13:08][352349694894804][2875 ms][DEBUG] END check_scloud in 2874 ms [2025-09-07 11:13:08][352349694894804][2875 ms][DEBUG] START check_boot_completed [2025-09-07 11:13:08][352349694894804][2875 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:13:08][352349694894804][2922 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:13:08][352349694894804][2922 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:13:08][352349694894804][2969 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:13:08][352349694894804][2969 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:13:08][352349694894804][2969 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:13:08][352349694894804][2969 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349694894804\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4566\"}'\'' -e'"" [2025-09-07 11:13:08][352349694894804][2969 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:13:08][352349694894804][2969 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349694894804\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4566\"}'\'' -e'"" [2025-09-07 11:13:14][352349694894804][9717 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 11:13:15][352349694894804][9874 ms][DEBUG] proc_open done in 6904 ms; code=255; res.len=115 [2025-09-07 11:13:15][352349694894804][9874 ms][DEBUG] END runCmdUntilRes#1 in 6905 ms [2025-09-07 11:13:15][352349694894804][9874 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 11:13:15][][0 ms][INFO] === Request start === [2025-09-07 11:13:15][][1 ms][DEBUG] START check_scloud [2025-09-07 11:13:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:13:15][][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 28942 24118 23781184 122588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:13:15][][337 ms][DEBUG] targetPkg: running [2025-09-07 11:13:15][][337 ms][DEBUG] END check_scloud in 337 ms [2025-09-07 11:13:15][][337 ms][DEBUG] START check_boot_completed [2025-09-07 11:13:15][][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:13:15][][384 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:13:15][][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:13:15][][431 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:13:15][][431 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:13:15][][431 ms][DEBUG] rawBody.length=1141 [2025-09-07 11:13:15][][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCNC0NEPFX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6340\"}'\'' -e'"" [2025-09-07 11:13:15][][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:13:15][][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCNC0NEPFX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6340\"}'\'' -e'"" [2025-09-07 11:13:20][][5367 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 11:13:20][][5523 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=115 [2025-09-07 11:13:20][][5523 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 11:13:20][][5523 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 11:13:21][352349694894804][0 ms][INFO] === Request start === [2025-09-07 11:13:21][352349694894804][1 ms][DEBUG] START check_scloud [2025-09-07 11:13:21][352349694894804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:13:21][352349694894804][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 28942 24118 23954504 124512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:13:21][352349694894804][335 ms][DEBUG] targetPkg: running [2025-09-07 11:13:21][352349694894804][335 ms][DEBUG] END check_scloud in 334 ms [2025-09-07 11:13:21][352349694894804][335 ms][DEBUG] START check_boot_completed [2025-09-07 11:13:21][352349694894804][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:13:21][352349694894804][365 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 11:13:21][352349694894804][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:13:21][352349694894804][413 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 11:13:21][352349694894804][413 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:13:21][352349694894804][413 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:13:21][352349694894804][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349694894804\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5651\"}'\'' -e'"" [2025-09-07 11:13:21][352349694894804][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:13:21][352349694894804][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349694894804\",\"model\":\"SM-G781W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5651\"}'\'' -e'"" [2025-09-07 11:13:26][352349694894804][4864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ef87a8d-4dd1-40b9-819c-5e2e8bd951d2","id":"QR_4ef87a8d-4dd1-40b9-819c-5e2e8bd951d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:13:26][352349694894804][5020 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-09-07 11:13:26][352349694894804][5020 ms][DEBUG] END runCmdUntilRes#1 in 4607 ms [2025-09-07 11:13:26][352349694894804][5020 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:13:28][352859307358013][0 ms][INFO] === Request start === [2025-09-07 11:13:28][352859307358013][1 ms][DEBUG] START check_scloud [2025-09-07 11:13:28][352859307358013][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:13:28][352859307358013][338 ms][DEBUG] SU: done in 338 ms; outu0_a118 28942 24118 24144348 104828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:13:28][352859307358013][339 ms][DEBUG] targetPkg: running [2025-09-07 11:13:28][352859307358013][339 ms][DEBUG] END check_scloud in 338 ms [2025-09-07 11:13:28][352859307358013][339 ms][DEBUG] START check_boot_completed [2025-09-07 11:13:28][352859307358013][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:13:28][352859307358013][385 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:13:28][352859307358013][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:13:28][352859307358013][432 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:13:28][352859307358013][432 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:13:28][352859307358013][432 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:13:28][352859307358013][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859307358013\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7708\"}'\'' -e'"" [2025-09-07 11:13:28][352859307358013][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:13:28][352859307358013][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859307358013\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7708\"}'\'' -e'"" [2025-09-07 11:13:32][352859307358013][4150 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b028db77-4807-42d2-a659-c8c1e9995fb6","id":"QR_b028db77-4807-42d2-a659-c8c1e9995fb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:13:32][352859307358013][4306 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-07 11:13:32][352859307358013][4306 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-07 11:13:32][352859307358013][4306 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:13:35][352859307358013][0 ms][INFO] === Request start === [2025-09-07 11:13:35][352859307358013][1 ms][DEBUG] START check_scloud [2025-09-07 11:13:35][352859307358013][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:13:35][352859307358013][392 ms][DEBUG] SU: done in 391 ms; outu0_a118 28942 24118 24305344 94456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:13:35][352859307358013][392 ms][DEBUG] targetPkg: running [2025-09-07 11:13:35][352859307358013][392 ms][DEBUG] END check_scloud in 392 ms [2025-09-07 11:13:35][352859307358013][392 ms][DEBUG] START check_boot_completed [2025-09-07 11:13:35][352859307358013][392 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:13:35][352859307358013][438 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:13:35][352859307358013][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:13:35][352859307358013][501 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:13:35][352859307358013][501 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:13:35][352859307358013][501 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:13:35][352859307358013][501 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859307358013\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1732\"}'\'' -e'"" [2025-09-07 11:13:35][352859307358013][501 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:13:35][352859307358013][501 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859307358013\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1732\"}'\'' -e'"" [2025-09-07 11:13:40][352859307358013][5968 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_413fe987-05bb-43dc-b3d3-ed33311f412c","id":"QR_413fe987-05bb-43dc-b3d3-ed33311f412c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:13:41][352859307358013][6124 ms][DEBUG] proc_open done in 5624 ms; code=255; res.len=3343 [2025-09-07 11:13:41][352859307358013][6125 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-09-07 11:13:41][352859307358013][6125 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:19:03][351752862006278][1 ms][INFO] === Request start === [2025-09-07 11:19:03][351752862006278][1 ms][DEBUG] START check_scloud [2025-09-07 11:19:03][351752862006278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:19:03][351752862006278][336 ms][DEBUG] SU: done in 334 ms; outu0_a118 28942 24118 24302588 80128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:19:03][351752862006278][336 ms][DEBUG] targetPkg: running [2025-09-07 11:19:03][351752862006278][336 ms][DEBUG] END check_scloud in 335 ms [2025-09-07 11:19:03][351752862006278][336 ms][DEBUG] START check_boot_completed [2025-09-07 11:19:03][351752862006278][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:19:03][351752862006278][367 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:19:03][351752862006278][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:19:03][351752862006278][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:19:03][351752862006278][414 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:19:03][351752862006278][414 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:19:03][351752862006278][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752862006278\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8297\"}'\'' -e'"" [2025-09-07 11:19:03][351752862006278][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:19:03][351752862006278][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752862006278\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8297\"}'\'' -e'"" [2025-09-07 11:19:08][351752862006278][5459 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e79aa2cd-3849-4bbe-9a18-d9ae0b0bcacc","id":"QR_e79aa2cd-3849-4bbe-9a18-d9ae0b0bcacc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:19:09][351752862006278][5616 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-07 11:19:09][351752862006278][5616 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-07 11:19:09][351752862006278][5616 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:19:11][351752862006278][0 ms][INFO] === Request start === [2025-09-07 11:19:11][351752862006278][1 ms][DEBUG] START check_scloud [2025-09-07 11:19:11][351752862006278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:19:11][351752862006278][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 28942 24118 24465604 89472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:19:11][351752862006278][274 ms][DEBUG] targetPkg: running [2025-09-07 11:19:11][351752862006278][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-07 11:19:11][351752862006278][274 ms][DEBUG] START check_boot_completed [2025-09-07 11:19:11][351752862006278][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:19:11][351752862006278][321 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:19:11][351752862006278][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:19:11][351752862006278][415 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 11:19:11][351752862006278][415 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 11:19:11][351752862006278][415 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:19:11][351752862006278][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752862006278\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9407\"}'\'' -e'"" [2025-09-07 11:19:11][351752862006278][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:19:11][351752862006278][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752862006278\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9407\"}'\'' -e'"" [2025-09-07 11:19:17][351752862006278][5507 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_913d780d-4be4-4e12-a410-c3125bbe6d6f","id":"QR_913d780d-4be4-4e12-a410-c3125bbe6d6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:19:17][351752862006278][5663 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-07 11:19:17][351752862006278][5663 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-07 11:19:17][351752862006278][5663 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:24:03][358153622214398][1 ms][INFO] === Request start === [2025-09-07 11:24:03][358153622214398][1 ms][DEBUG] START check_scloud [2025-09-07 11:24:03][358153622214398][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:24:04][358153622214398][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 28942 24118 24558980 100800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:24:04][358153622214398][302 ms][DEBUG] targetPkg: running [2025-09-07 11:24:04][358153622214398][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 11:24:04][358153622214398][302 ms][DEBUG] START check_boot_completed [2025-09-07 11:24:04][358153622214398][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:24:04][358153622214398][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:24:04][358153622214398][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:24:04][358153622214398][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:24:04][358153622214398][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:24:04][358153622214398][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:24:04][358153622214398][522 ms][DEBUG] SU: done in 127 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1110\nsuccessfulTxPacketsPerSecond: 0.5948128333361025\nretriedTxPackets: 192\nretriedTxPacketsPerSecond: 0.16282585940485486\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1094\nsuccessfulRxPacketsPerSecond: 0.4884775782145646\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:24:04][358153622214398][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:24:06][358153622214398][2302 ms][DEBUG] SU: done in 1779 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.601/301.601/301.601/0.000 ms\n [2025-09-07 11:24:06][358153622214398][2302 ms][DEBUG] check_internet: online [2025-09-07 11:24:06][358153622214398][2302 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:24:06][358153622214398][2302 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358153622214398\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7570\"}'\'' -e'"" [2025-09-07 11:24:06][358153622214398][2302 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:24:06][358153622214398][2302 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358153622214398\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7570\"}'\'' -e'"" [2025-09-07 11:24:10][358153622214398][6301 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6968241-0cba-4cd0-9cc6-008aa9cb9515","id":"QR_d6968241-0cba-4cd0-9cc6-008aa9cb9515","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:24:10][358153622214398][6457 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-07 11:24:10][358153622214398][6457 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-07 11:24:10][358153622214398][6457 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:24:12][358153622214398][0 ms][INFO] === Request start === [2025-09-07 11:24:12][358153622214398][1 ms][DEBUG] START check_scloud [2025-09-07 11:24:12][358153622214398][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:24:12][358153622214398][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 28942 24118 24717836 112580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:24:12][358153622214398][268 ms][DEBUG] targetPkg: running [2025-09-07 11:24:12][358153622214398][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 11:24:12][358153622214398][268 ms][DEBUG] START check_boot_completed [2025-09-07 11:24:12][358153622214398][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:24:12][358153622214398][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:24:12][358153622214398][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:24:13][358153622214398][393 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 11:24:13][358153622214398][393 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 11:24:13][358153622214398][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:24:13][358153622214398][502 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1110\nsuccessfulTxPacketsPerSecond: 0.5948128333361025\nretriedTxPackets: 192\nretriedTxPacketsPerSecond: 0.16282585940485486\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1094\nsuccessfulRxPacketsPerSecond: 0.4884775782145646\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:24:13][358153622214398][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:24:13][358153622214398][940 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.022/336.022/336.022/0.000 ms\n [2025-09-07 11:24:13][358153622214398][940 ms][DEBUG] check_internet: online [2025-09-07 11:24:13][358153622214398][940 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:24:13][358153622214398][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358153622214398\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5189\"}'\'' -e'"" [2025-09-07 11:24:13][358153622214398][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:24:13][358153622214398][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358153622214398\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5189\"}'\'' -e'"" [2025-09-07 11:24:19][358153622214398][6407 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae912b85-6234-466f-92d7-889c39b1f7b0","id":"QR_ae912b85-6234-466f-92d7-889c39b1f7b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:24:19][358153622214398][6563 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-07 11:24:19][358153622214398][6563 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-07 11:24:19][358153622214398][6564 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:25:03][353289768426571][0 ms][INFO] === Request start === [2025-09-07 11:25:03][353289768426571][1 ms][DEBUG] START check_scloud [2025-09-07 11:25:03][353289768426571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:25:03][353289768426571][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 28942 24118 24857804 123708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:25:03][353289768426571][318 ms][DEBUG] targetPkg: running [2025-09-07 11:25:03][353289768426571][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 11:25:03][353289768426571][318 ms][DEBUG] START check_boot_completed [2025-09-07 11:25:03][353289768426571][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:25:03][353289768426571][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:25:03][353289768426571][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:25:04][353289768426571][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:25:04][353289768426571][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:25:04][353289768426571][411 ms][DEBUG] rawBody.length=1149 [2025-09-07 11:25:04][353289768426571][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289768426571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6505\"}'\'' -e'"" [2025-09-07 11:25:04][353289768426571][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:25:04][353289768426571][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289768426571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6505\"}'\'' -e'"" [2025-09-07 11:25:07][353289768426571][3832 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9451772-38f2-4e68-83b8-7cea0a667a29","id":"QR_c9451772-38f2-4e68-83b8-7cea0a667a29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:25:07][353289768426571][3988 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-07 11:25:07][353289768426571][3988 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-07 11:25:07][353289768426571][3988 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:25:09][353289768426571][0 ms][INFO] === Request start === [2025-09-07 11:25:09][353289768426571][1 ms][DEBUG] START check_scloud [2025-09-07 11:25:09][353289768426571][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:25:10][353289768426571][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 28942 24118 25003596 134848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:25:10][353289768426571][308 ms][DEBUG] targetPkg: running [2025-09-07 11:25:10][353289768426571][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 11:25:10][353289768426571][308 ms][DEBUG] START check_boot_completed [2025-09-07 11:25:10][353289768426571][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:25:10][353289768426571][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:25:10][353289768426571][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:25:10][353289768426571][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:25:10][353289768426571][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:25:10][353289768426571][386 ms][DEBUG] rawBody.length=1159 [2025-09-07 11:25:10][353289768426571][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289768426571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9343\"}'\'' -e'"" [2025-09-07 11:25:10][353289768426571][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:25:10][353289768426571][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289768426571\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9343\"}'\'' -e'"" [2025-09-07 11:25:14][353289768426571][4807 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0db1bbd7-8b42-451a-b14a-2a9b05750f06","id":"QR_0db1bbd7-8b42-451a-b14a-2a9b05750f06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:25:14][353289768426571][4963 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3343 [2025-09-07 11:25:14][353289768426571][4963 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-07 11:25:14][353289768426571][4963 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:25:19][350804335219086][0 ms][INFO] === Request start === [2025-09-07 11:25:19][350804335219086][1 ms][DEBUG] START check_scloud [2025-09-07 11:25:19][350804335219086][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:25:19][350804335219086][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 28942 24118 25168728 146168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:25:19][350804335219086][324 ms][DEBUG] targetPkg: running [2025-09-07 11:25:19][350804335219086][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 11:25:19][350804335219086][324 ms][DEBUG] START check_boot_completed [2025-09-07 11:25:19][350804335219086][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:25:19][350804335219086][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:25:19][350804335219086][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:25:19][350804335219086][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:25:19][350804335219086][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:25:19][350804335219086][433 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:25:19][350804335219086][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804335219086\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6058\"}'\'' -e'"" [2025-09-07 11:25:19][350804335219086][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:25:19][350804335219086][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804335219086\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6058\"}'\'' -e'"" [2025-09-07 11:25:24][350804335219086][4885 ms][DEBUG] proc_open done in 4452 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 11:25:24][350804335219086][4885 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-07 11:25:24][350804335219086][4885 ms][WARN] Detected error: Process with pid 28942 either refused to load frida-agent, or terminated during injectionProcess with pid 28942 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 11:25:24][350804335219086][4885 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 11:25:24][350804335219086][5151 ms][DEBUG] SU: done in 266 ms; outsystem 24457 24118 12764576 266072 ep_poll 0 S system_server\n [2025-09-07 11:25:24][350804335219086][5151 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 11:25:24][350804335219086][5291 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 11:25:24][350804335219086][5291 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 11:25:24][350804335219086][5291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 11:25:24][350804335219086][5416 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 11:25:24][350804335219086][5416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 11:25:24][350804335219086][5604 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 11:25:26][350804335219086][7619 ms][DEBUG] START check_boot_completed [2025-09-07 11:25:26][350804335219086][7619 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:25:26][350804335219086][7666 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:25:26][350804335219086][7666 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:25:26][350804335219086][7712 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:25:26][350804335219086][7712 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:25:29][350804335219086][10727 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 11:25:29][350804335219086][10727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804335219086\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6058\"}'\'' -e'"" [2025-09-07 11:25:33][350804335219086][14570 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2565f70b-553d-4fa0-a66d-d530fd4f9339","id":"QR_2565f70b-553d-4fa0-a66d-d530fd4f9339","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:25:33][350804335219086][14726 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-07 11:25:33][350804335219086][14726 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-09-07 11:25:33][350804335219086][14726 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:25:36][350804335219086][0 ms][INFO] === Request start === [2025-09-07 11:25:36][350804335219086][1 ms][DEBUG] START check_scloud [2025-09-07 11:25:36][350804335219086][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:25:36][350804335219086][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 5451 24118 23755232 125232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:25:36][350804335219086][244 ms][DEBUG] targetPkg: running [2025-09-07 11:25:36][350804335219086][244 ms][DEBUG] END check_scloud in 244 ms [2025-09-07 11:25:36][350804335219086][244 ms][DEBUG] START check_boot_completed [2025-09-07 11:25:36][350804335219086][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:25:36][350804335219086][275 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:25:36][350804335219086][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:25:36][350804335219086][323 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 11:25:36][350804335219086][324 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 11:25:36][350804335219086][324 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:25:36][350804335219086][324 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804335219086\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8163\"}'\'' -e'"" [2025-09-07 11:25:36][350804335219086][324 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:25:36][350804335219086][324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804335219086\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8163\"}'\'' -e'"" [2025-09-07 11:25:41][350804335219086][5165 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0a1d163-d30e-4749-83fb-b989494a398d","id":"QR_e0a1d163-d30e-4749-83fb-b989494a398d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:25:41][350804335219086][5321 ms][DEBUG] proc_open done in 4997 ms; code=255; res.len=3343 [2025-09-07 11:25:41][350804335219086][5321 ms][DEBUG] END runCmdUntilRes#1 in 4997 ms [2025-09-07 11:25:41][350804335219086][5321 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:28:03][352838651026418][1 ms][INFO] === Request start === [2025-09-07 11:28:03][352838651026418][1 ms][DEBUG] START check_scloud [2025-09-07 11:28:03][352838651026418][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:28:03][352838651026418][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 5451 24118 23838120 138620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:28:03][352838651026418][298 ms][DEBUG] targetPkg: running [2025-09-07 11:28:03][352838651026418][299 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 11:28:03][352838651026418][299 ms][DEBUG] START check_boot_completed [2025-09-07 11:28:03][352838651026418][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:28:03][352838651026418][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:28:03][352838651026418][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:28:03][352838651026418][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:28:03][352838651026418][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:28:03][352838651026418][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:28:03][352838651026418][533 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1316\nsuccessfulTxPacketsPerSecond: 0.6835610210941622\nretriedTxPackets: 245\nretriedTxPacketsPerSecond: 0.17586764134946892\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1277\nsuccessfulRxPacketsPerSecond: 0.6072411012632606\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:28:03][352838651026418][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:28:04][352838651026418][970 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=314 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 314.281/314.281/314.281/0.000 ms\n [2025-09-07 11:28:04][352838651026418][970 ms][DEBUG] check_internet: online [2025-09-07 11:28:04][352838651026418][970 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:28:04][352838651026418][970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838651026418\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1219\"}'\'' -e'"" [2025-09-07 11:28:04][352838651026418][970 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:28:04][352838651026418][970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838651026418\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1219\"}'\'' -e'"" [2025-09-07 11:28:09][352838651026418][6422 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44ceb3e1-5296-41c2-86f2-288bd3f35fb1","id":"QR_44ceb3e1-5296-41c2-86f2-288bd3f35fb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:28:10][352838651026418][6578 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-07 11:28:10][352838651026418][6578 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-07 11:28:10][352838651026418][6578 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:28:12][352838651026418][0 ms][INFO] === Request start === [2025-09-07 11:28:12][352838651026418][1 ms][DEBUG] START check_scloud [2025-09-07 11:28:12][352838651026418][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:28:12][352838651026418][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 5451 24118 24003312 150288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:28:12][352838651026418][305 ms][DEBUG] targetPkg: running [2025-09-07 11:28:12][352838651026418][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 11:28:12][352838651026418][306 ms][DEBUG] START check_boot_completed [2025-09-07 11:28:12][352838651026418][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:28:12][352838651026418][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:28:12][352838651026418][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:28:12][352838651026418][416 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 11:28:12][352838651026418][416 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 11:28:12][352838651026418][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:28:12][352838651026418][539 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1316\nsuccessfulTxPacketsPerSecond: 0.6835610210941622\nretriedTxPackets: 245\nretriedTxPacketsPerSecond: 0.17586764134946892\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1277\nsuccessfulRxPacketsPerSecond: 0.6072411012632606\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:28:12][352838651026418][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:28:13][352838651026418][1165 ms][DEBUG] SU: done in 625 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.982/303.982/303.982/0.000 ms\n [2025-09-07 11:28:13][352838651026418][1165 ms][DEBUG] check_internet: online [2025-09-07 11:28:13][352838651026418][1165 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:28:13][352838651026418][1165 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838651026418\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5389\"}'\'' -e'"" [2025-09-07 11:28:13][352838651026418][1165 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:28:13][352838651026418][1165 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838651026418\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5389\"}'\'' -e'"" [2025-09-07 11:28:18][352838651026418][6522 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b665bc42-ebed-46e8-9a76-fd1efb8082b2","id":"QR_b665bc42-ebed-46e8-9a76-fd1efb8082b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:28:19][352838651026418][6679 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 11:28:19][352838651026418][6679 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 11:28:19][352838651026418][6679 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:32:03][350471516041125][1 ms][INFO] === Request start === [2025-09-07 11:32:03][350471516041125][1 ms][DEBUG] START check_scloud [2025-09-07 11:32:03][350471516041125][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:32:03][350471516041125][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 5451 24118 24092528 161932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:32:03][350471516041125][319 ms][DEBUG] targetPkg: running [2025-09-07 11:32:03][350471516041125][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 11:32:03][350471516041125][319 ms][DEBUG] START check_boot_completed [2025-09-07 11:32:03][350471516041125][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:32:03][350471516041125][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:32:03][350471516041125][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:32:03][350471516041125][459 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 11:32:03][350471516041125][460 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 11:32:03][350471516041125][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:32:03][350471516041125][600 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1391\nsuccessfulTxPacketsPerSecond: 0.578306564165041\nretriedTxPackets: 263\nretriedTxPacketsPerSecond: 0.13879357539960985\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1346\nsuccessfulRxPacketsPerSecond: 0.5320420390318377\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:32:03][350471516041125][600 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:32:04][350471516041125][1006 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.754/315.754/315.754/0.000 ms\n [2025-09-07 11:32:04][350471516041125][1006 ms][DEBUG] check_internet: online [2025-09-07 11:32:04][350471516041125][1006 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:32:04][350471516041125][1007 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471516041125\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6823\"}'\'' -e'"" [2025-09-07 11:32:04][350471516041125][1007 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:32:04][350471516041125][1007 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471516041125\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6823\"}'\'' -e'"" [2025-09-07 11:32:09][350471516041125][6395 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e8ef298-6b0b-48d2-905a-b870176f470d","id":"QR_0e8ef298-6b0b-48d2-905a-b870176f470d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:32:09][350471516041125][6552 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-07 11:32:09][350471516041125][6552 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-07 11:32:09][350471516041125][6552 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:32:12][350471516041125][0 ms][INFO] === Request start === [2025-09-07 11:32:12][350471516041125][1 ms][DEBUG] START check_scloud [2025-09-07 11:32:12][350471516041125][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:32:12][350471516041125][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 5451 24118 24260600 172696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:32:12][350471516041125][315 ms][DEBUG] targetPkg: running [2025-09-07 11:32:12][350471516041125][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 11:32:12][350471516041125][316 ms][DEBUG] START check_boot_completed [2025-09-07 11:32:12][350471516041125][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:32:12][350471516041125][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:32:12][350471516041125][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:32:12][350471516041125][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:32:12][350471516041125][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:32:12][350471516041125][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:32:12][350471516041125][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1391\nsuccessfulTxPacketsPerSecond: 0.578306564165041\nretriedTxPackets: 263\nretriedTxPacketsPerSecond: 0.13879357539960985\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1346\nsuccessfulRxPacketsPerSecond: 0.5320420390318377\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:32:12][350471516041125][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:32:13][350471516041125][893 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.302/268.302/268.302/0.000 ms\n [2025-09-07 11:32:13][350471516041125][893 ms][DEBUG] check_internet: online [2025-09-07 11:32:13][350471516041125][893 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:32:13][350471516041125][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471516041125\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7882\"}'\'' -e'"" [2025-09-07 11:32:13][350471516041125][894 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:32:13][350471516041125][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471516041125\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7882\"}'\'' -e'"" [2025-09-07 11:32:18][350471516041125][6157 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6d5e20d-ad4f-4631-ad23-84b1e3fd450c","id":"QR_e6d5e20d-ad4f-4631-ad23-84b1e3fd450c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:32:18][350471516041125][6314 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-07 11:32:18][350471516041125][6314 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-07 11:32:18][350471516041125][6314 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:38:04][350013884348136][1 ms][INFO] === Request start === [2025-09-07 11:38:04][350013884348136][1 ms][DEBUG] START check_scloud [2025-09-07 11:38:04][350013884348136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:38:04][350013884348136][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 5451 24118 24382008 184800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:38:04][350013884348136][258 ms][DEBUG] targetPkg: running [2025-09-07 11:38:04][350013884348136][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-07 11:38:04][350013884348136][258 ms][DEBUG] START check_boot_completed [2025-09-07 11:38:04][350013884348136][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:38:04][350013884348136][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:38:04][350013884348136][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:38:04][350013884348136][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:38:04][350013884348136][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:38:04][350013884348136][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:38:04][350013884348136][492 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1497\nsuccessfulTxPacketsPerSecond: 0.3516536012978008\nretriedTxPackets: 290\nretriedTxPacketsPerSecond: 0.08957214372679832\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1438\nsuccessfulRxPacketsPerSecond: 0.30520878603205354\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:38:04][350013884348136][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:38:06][350013884348136][1930 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.232/292.232/292.232/0.000 ms\n [2025-09-07 11:38:06][350013884348136][1930 ms][DEBUG] check_internet: online [2025-09-07 11:38:06][350013884348136][1930 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:38:06][350013884348136][1930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884348136\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6841\"}'\'' -e'"" [2025-09-07 11:38:06][350013884348136][1930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:38:06][350013884348136][1930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884348136\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6841\"}'\'' -e'"" [2025-09-07 11:38:09][350013884348136][5741 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dba69fa-f593-4052-8f41-6532629a6f0d","id":"QR_7dba69fa-f593-4052-8f41-6532629a6f0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:38:09][350013884348136][5897 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-07 11:38:09][350013884348136][5897 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-07 11:38:09][350013884348136][5897 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:38:12][350013884348136][0 ms][INFO] === Request start === [2025-09-07 11:38:12][350013884348136][1 ms][DEBUG] START check_scloud [2025-09-07 11:38:12][350013884348136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:38:12][350013884348136][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 5451 24118 24501952 195828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:38:12][350013884348136][316 ms][DEBUG] targetPkg: running [2025-09-07 11:38:12][350013884348136][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 11:38:12][350013884348136][316 ms][DEBUG] START check_boot_completed [2025-09-07 11:38:12][350013884348136][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:38:12][350013884348136][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:38:12][350013884348136][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:38:12][350013884348136][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:38:12][350013884348136][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:38:12][350013884348136][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:38:12][350013884348136][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1497\nsuccessfulTxPacketsPerSecond: 0.3516536012978008\nretriedTxPackets: 290\nretriedTxPacketsPerSecond: 0.08957214372679832\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1438\nsuccessfulRxPacketsPerSecond: 0.30520878603205354\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:38:12][350013884348136][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:38:13][350013884348136][878 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.429/226.429/226.429/0.000 ms\n [2025-09-07 11:38:13][350013884348136][878 ms][DEBUG] check_internet: online [2025-09-07 11:38:13][350013884348136][878 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:38:13][350013884348136][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884348136\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9637\"}'\'' -e'"" [2025-09-07 11:38:13][350013884348136][878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:38:13][350013884348136][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884348136\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9637\"}'\'' -e'"" [2025-09-07 11:38:18][350013884348136][6033 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3509f069-8102-4591-b49f-4bc7f26e59e7","id":"QR_3509f069-8102-4591-b49f-4bc7f26e59e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:38:18][350013884348136][6189 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 11:38:18][350013884348136][6189 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 11:38:18][350013884348136][6189 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:40:04][350013882731010][0 ms][INFO] === Request start === [2025-09-07 11:40:04][350013882731010][1 ms][DEBUG] START check_scloud [2025-09-07 11:40:04][350013882731010][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:40:04][350013882731010][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 5451 24118 24623872 207444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:40:04][350013882731010][308 ms][DEBUG] targetPkg: running [2025-09-07 11:40:04][350013882731010][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 11:40:04][350013882731010][308 ms][DEBUG] START check_boot_completed [2025-09-07 11:40:04][350013882731010][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:40:04][350013882731010][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:40:04][350013882731010][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:40:04][350013882731010][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:40:04][350013882731010][417 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 11:40:04][350013882731010][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:40:04][350013882731010][573 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1497\nsuccessfulTxPacketsPerSecond: 0.3516536012978008\nretriedTxPackets: 290\nretriedTxPacketsPerSecond: 0.08957214372679832\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1438\nsuccessfulRxPacketsPerSecond: 0.30520878603205354\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:40:04][350013882731010][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:40:05][350013882731010][932 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.686/250.686/250.686/0.000 ms\n [2025-09-07 11:40:05][350013882731010][932 ms][DEBUG] check_internet: online [2025-09-07 11:40:05][350013882731010][932 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:40:05][350013882731010][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882731010\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2519\"}'\'' -e'"" [2025-09-07 11:40:05][350013882731010][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:40:05][350013882731010][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882731010\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2519\"}'\'' -e'"" [2025-09-07 11:40:10][350013882731010][6290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_428f12fa-c576-4f49-b319-69c50116fb81","id":"QR_428f12fa-c576-4f49-b319-69c50116fb81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:40:10][350013882731010][6446 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 11:40:10][350013882731010][6446 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 11:40:10][350013882731010][6446 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:40:13][350013882731010][1 ms][INFO] === Request start === [2025-09-07 11:40:13][350013882731010][1 ms][DEBUG] START check_scloud [2025-09-07 11:40:13][350013882731010][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:40:13][350013882731010][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 5451 24118 24749896 218160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:40:13][350013882731010][317 ms][DEBUG] targetPkg: running [2025-09-07 11:40:13][350013882731010][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 11:40:13][350013882731010][317 ms][DEBUG] START check_boot_completed [2025-09-07 11:40:13][350013882731010][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:40:13][350013882731010][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:40:13][350013882731010][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:40:13][350013882731010][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:40:13][350013882731010][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:40:13][350013882731010][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:40:13][350013882731010][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2842020 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1600\nsuccessfulTxPacketsPerSecond: 0.3419234688965831\nretriedTxPackets: 315\nretriedTxPacketsPerSecond: 0.08299113322732599\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1530\nsuccessfulRxPacketsPerSecond: 0.3054073702765597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:40:13][350013882731010][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:40:13][350013882731010][957 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.819/318.819/318.819/0.000 ms\n [2025-09-07 11:40:13][350013882731010][957 ms][DEBUG] check_internet: online [2025-09-07 11:40:13][350013882731010][957 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:40:13][350013882731010][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882731010\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8745\"}'\'' -e'"" [2025-09-07 11:40:13][350013882731010][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:40:13][350013882731010][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882731010\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8745\"}'\'' -e'"" [2025-09-07 11:40:19][350013882731010][6143 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11cc751f-4667-45eb-9260-5cdfc65a2835","id":"QR_11cc751f-4667-45eb-9260-5cdfc65a2835","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:40:19][350013882731010][6299 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-07 11:40:19][350013882731010][6299 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-07 11:40:19][350013882731010][6300 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:41:03][352623170918000][0 ms][INFO] === Request start === [2025-09-07 11:41:03][352623170918000][1 ms][DEBUG] START check_scloud [2025-09-07 11:41:03][352623170918000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:41:04][352623170918000][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 5451 24118 24849292 229188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:41:04][352623170918000][312 ms][DEBUG] targetPkg: running [2025-09-07 11:41:04][352623170918000][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 11:41:04][352623170918000][313 ms][DEBUG] START check_boot_completed [2025-09-07 11:41:04][352623170918000][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:41:04][352623170918000][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:41:04][352623170918000][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:41:04][352623170918000][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:41:04][352623170918000][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:41:04][352623170918000][422 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:41:04][352623170918000][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623170918000\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-09-07 11:41:04][352623170918000][422 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:41:04][352623170918000][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623170918000\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-09-07 11:41:07][352623170918000][3874 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d69d3c83-b8e5-4099-acd8-e19d8e882bd8","id":"QR_d69d3c83-b8e5-4099-acd8-e19d8e882bd8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:41:07][352623170918000][4030 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-07 11:41:07][352623170918000][4030 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-07 11:41:07][352623170918000][4030 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:41:10][352623170918000][0 ms][INFO] === Request start === [2025-09-07 11:41:10][352623170918000][1 ms][DEBUG] START check_scloud [2025-09-07 11:41:10][352623170918000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:41:10][352623170918000][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 5451 24118 24993812 240040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:41:10][352623170918000][297 ms][DEBUG] targetPkg: running [2025-09-07 11:41:10][352623170918000][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 11:41:10][352623170918000][297 ms][DEBUG] START check_boot_completed [2025-09-07 11:41:10][352623170918000][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:41:10][352623170918000][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:41:10][352623170918000][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:41:10][352623170918000][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:41:10][352623170918000][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:41:10][352623170918000][406 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:41:10][352623170918000][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623170918000\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8743\"}'\'' -e'"" [2025-09-07 11:41:10][352623170918000][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:41:10][352623170918000][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623170918000\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8743\"}'\'' -e'"" [2025-09-07 11:41:18][352623170918000][8623 ms][DEBUG] proc_open done in 8216 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-07 11:41:18][352623170918000][8623 ms][DEBUG] END runCmdUntilRes#1 in 8216 ms [2025-09-07 11:41:18][352623170918000][8623 ms][WARN] Detected error: Process with pid 5451 either refused to load frida-agent, or terminated during injectionProcess with pid 5451 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 11:41:18][352623170918000][8623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 11:41:19][352623170918000][8904 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 11:41:19][352623170918000][8904 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 11:41:19][352623170918000][9419 ms][DEBUG] SU: done in 515 ms; out [2025-09-07 11:41:19][352623170918000][9419 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 11:41:19][352623170918000][9419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 11:41:19][352623170918000][9778 ms][DEBUG] SU: done in 359 ms; out [2025-09-07 11:41:19][352623170918000][9778 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 11:41:20][352623170918000][9950 ms][DEBUG] SU: done in 172 ms; out [2025-09-07 11:41:22][352623170918000][11965 ms][DEBUG] START check_boot_completed [2025-09-07 11:41:22][352623170918000][11966 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:41:22][352623170918000][12012 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:41:22][352623170918000][12012 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:41:22][352623170918000][12059 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:41:22][352623170918000][12059 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 11:41:25][352623170918000][15074 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 11:41:25][352623170918000][15074 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623170918000\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8743\"}'\'' -e'"" [2025-09-07 11:41:26][352623170918000][16605 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 11:41:26][352623170918000][16605 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-09-07 11:41:26][352623170918000][16605 ms][WARN] Detected error 2; Reboot the device [2025-09-07 11:41:26][352623170918000][16605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 11:41:27][352623170918000][16886 ms][DEBUG] SU: done in 281 ms; outsystem 7603 7264 7631828 142808 0 0 R system_server\n [2025-09-07 11:41:27][352623170918000][16886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 11:41:27][352623170918000][17573 ms][DEBUG] SU: done in 687 ms; out [2025-09-07 11:42:03][351632918087854][0 ms][INFO] === Request start === [2025-09-07 11:42:03][351632918087854][1 ms][DEBUG] START check_scloud [2025-09-07 11:42:03][351632918087854][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:42:03][351632918087854][35 ms][DEBUG] SU: done in 34 ms; out [2025-09-07 11:42:03][351632918087854][35 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 11:42:03][351632918087854][66 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 11:42:03][351632918087854][66 ms][WARN] check_devices: no device [2025-09-07 11:42:03][351632918087854][66 ms][WARN] check_devices: no device [2025-09-07 11:42:03][351632918087854][66 ms][DEBUG] END check_scloud in 65 ms [2025-09-07 11:43:03][351632918087854][1 ms][INFO] === Request start === [2025-09-07 11:43:03][351632918087854][1 ms][DEBUG] START check_scloud [2025-09-07 11:43:03][351632918087854][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:43:04][351632918087854][656 ms][DEBUG] SU: done in 655 ms; out [2025-09-07 11:43:04][351632918087854][656 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 11:43:04][351632918087854][703 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 11:43:04][351632918087854][703 ms][DEBUG] check_devices: device found [2025-09-07 11:43:04][351632918087854][703 ms][WARN] targetPkg: not running, restarting [2025-09-07 11:43:04][351632918087854][703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 11:43:04][351632918087854][844 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 11:43:04][351632918087854][844 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 11:43:05][351632918087854][1156 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 11:43:07][351632918087854][3171 ms][DEBUG] END check_scloud in 3170 ms [2025-09-07 11:43:07][351632918087854][3171 ms][DEBUG] START check_boot_completed [2025-09-07 11:43:07][351632918087854][3171 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:43:07][351632918087854][3218 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:43:07][351632918087854][3218 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:43:07][351632918087854][3296 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 11:43:07][351632918087854][3296 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 11:43:07][351632918087854][3296 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:43:07][351632918087854][3296 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918087854\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8100\"}'\'' -e'"" [2025-09-07 11:43:07][351632918087854][3296 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:43:07][351632918087854][3296 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918087854\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8100\"}'\'' -e'"" [2025-09-07 11:43:13][351632918087854][9248 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4195f5a7-5ab8-4d7e-9774-24a777debf33","id":"QR_4195f5a7-5ab8-4d7e-9774-24a777debf33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:43:13][351632918087854][9404 ms][DEBUG] proc_open done in 6108 ms; code=255; res.len=3343 [2025-09-07 11:43:13][351632918087854][9404 ms][DEBUG] END runCmdUntilRes#1 in 6108 ms [2025-09-07 11:43:13][351632918087854][9404 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:43:15][351632918087854][0 ms][INFO] === Request start === [2025-09-07 11:43:15][351632918087854][1 ms][DEBUG] START check_scloud [2025-09-07 11:43:15][351632918087854][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:43:15][351632918087854][342 ms][DEBUG] SU: done in 341 ms; outu0_a118 11094 4969 23511308 121952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:43:15][351632918087854][342 ms][DEBUG] targetPkg: running [2025-09-07 11:43:15][351632918087854][342 ms][DEBUG] END check_scloud in 341 ms [2025-09-07 11:43:15][351632918087854][342 ms][DEBUG] START check_boot_completed [2025-09-07 11:43:15][351632918087854][342 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:43:15][351632918087854][373 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:43:15][351632918087854][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:43:16][351632918087854][420 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:43:16][351632918087854][420 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:43:16][351632918087854][420 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:43:16][351632918087854][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918087854\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1338\"}'\'' -e'"" [2025-09-07 11:43:16][351632918087854][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:43:16][351632918087854][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918087854\",\"model\":\"SM-A136B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1338\"}'\'' -e'"" [2025-09-07 11:46:03][354838355040762][1 ms][INFO] === Request start === [2025-09-07 11:46:03][354838355040762][1 ms][DEBUG] START check_scloud [2025-09-07 11:46:03][354838355040762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:46:03][354838355040762][294 ms][DEBUG] SU: done in 293 ms; out [2025-09-07 11:46:03][354838355040762][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 11:46:03][354838355040762][341 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 11:46:03][354838355040762][341 ms][DEBUG] check_devices: device found [2025-09-07 11:46:03][354838355040762][341 ms][WARN] targetPkg: not running, restarting [2025-09-07 11:46:03][354838355040762][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 11:46:03][354838355040762][466 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 11:46:03][354838355040762][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 11:46:04][354838355040762][654 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 11:46:06][354838355040762][2669 ms][DEBUG] END check_scloud in 2668 ms [2025-09-07 11:46:06][354838355040762][2669 ms][DEBUG] START check_boot_completed [2025-09-07 11:46:06][354838355040762][2669 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:46:06][354838355040762][2716 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:46:06][354838355040762][2716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:46:06][354838355040762][2763 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:46:06][354838355040762][2763 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:46:06][354838355040762][2763 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:46:06][354838355040762][2887 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=106530 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 844\nsuccessfulTxPacketsPerSecond: 9.450107931099536\nretriedTxPackets: 110\nretriedTxPacketsPerSecond: 1.105300009263046\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 865\nsuccessfulRxPacketsPerSecond: 9.616123050533819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:46:06][354838355040762][2888 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:46:07][354838355040762][4184 ms][DEBUG] SU: done in 1297 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.397/219.397/219.397/0.000 ms\n [2025-09-07 11:46:07][354838355040762][4184 ms][DEBUG] check_internet: online [2025-09-07 11:46:07][354838355040762][4184 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:46:07][354838355040762][4184 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838355040762\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4637\"}'\'' -e'"" [2025-09-07 11:46:07][354838355040762][4184 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:46:07][354838355040762][4185 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838355040762\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4637\"}'\'' -e'"" [2025-09-07 11:46:12][354838355040762][8917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a977fb89-9ee0-4ae8-8c5c-6df3475b1690","id":"QR_a977fb89-9ee0-4ae8-8c5c-6df3475b1690","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:46:12][354838355040762][9073 ms][DEBUG] proc_open done in 4888 ms; code=255; res.len=3343 [2025-09-07 11:46:12][354838355040762][9073 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-07 11:46:12][354838355040762][9073 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:46:14][354838355040762][0 ms][INFO] === Request start === [2025-09-07 11:46:14][354838355040762][1 ms][DEBUG] START check_scloud [2025-09-07 11:46:14][354838355040762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:46:15][354838355040762][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 23777 12330 23730748 124672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:46:15][354838355040762][295 ms][DEBUG] targetPkg: running [2025-09-07 11:46:15][354838355040762][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-07 11:46:15][354838355040762][295 ms][DEBUG] START check_boot_completed [2025-09-07 11:46:15][354838355040762][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:46:15][354838355040762][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:46:15][354838355040762][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:46:15][354838355040762][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:46:15][354838355040762][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:46:15][354838355040762][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:46:15][354838355040762][513 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=106530 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 844\nsuccessfulTxPacketsPerSecond: 9.450107931099536\nretriedTxPackets: 110\nretriedTxPacketsPerSecond: 1.105300009263046\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 865\nsuccessfulRxPacketsPerSecond: 9.616123050533819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:46:15][354838355040762][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:46:15][354838355040762][951 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.460/313.460/313.460/0.000 ms\n [2025-09-07 11:46:15][354838355040762][951 ms][DEBUG] check_internet: online [2025-09-07 11:46:15][354838355040762][951 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:46:15][354838355040762][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838355040762\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9059\"}'\'' -e'"" [2025-09-07 11:46:15][354838355040762][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:46:15][354838355040762][951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838355040762\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9059\"}'\'' -e'"" [2025-09-07 11:46:20][354838355040762][6152 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2012e1bf-8705-4218-a1a4-95a4fc9700f6","id":"QR_2012e1bf-8705-4218-a1a4-95a4fc9700f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:46:21][354838355040762][6309 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-07 11:46:21][354838355040762][6309 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-07 11:46:21][354838355040762][6309 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:48:03][356356900233624][0 ms][INFO] === Request start === [2025-09-07 11:48:03][356356900233624][1 ms][DEBUG] START check_scloud [2025-09-07 11:48:03][356356900233624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:48:03][356356900233624][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 23777 12330 23806424 138388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:48:03][356356900233624][329 ms][DEBUG] targetPkg: running [2025-09-07 11:48:03][356356900233624][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-07 11:48:03][356356900233624][329 ms][DEBUG] START check_boot_completed [2025-09-07 11:48:03][356356900233624][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:48:03][356356900233624][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:48:03][356356900233624][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:48:03][356356900233624][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:48:03][356356900233624][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:48:03][356356900233624][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:48:04][356356900233624][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=106530 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 844\nsuccessfulTxPacketsPerSecond: 9.450107931099536\nretriedTxPackets: 110\nretriedTxPacketsPerSecond: 1.105300009263046\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 865\nsuccessfulRxPacketsPerSecond: 9.616123050533819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:48:04][356356900233624][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:48:04][356356900233624][938 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.375/309.375/309.375/0.000 ms\n [2025-09-07 11:48:04][356356900233624][938 ms][DEBUG] check_internet: online [2025-09-07 11:48:04][356356900233624][938 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:48:04][356356900233624][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356900233624\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2970\"}'\'' -e'"" [2025-09-07 11:48:04][356356900233624][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:48:04][356356900233624][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356900233624\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2970\"}'\'' -e'"" [2025-09-07 11:48:09][356356900233624][6234 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c741c231-014e-4330-a14d-866d2a9e3229","id":"QR_c741c231-014e-4330-a14d-866d2a9e3229","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:48:09][356356900233624][6390 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-09-07 11:48:09][356356900233624][6390 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-07 11:48:09][356356900233624][6390 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:48:12][356356900233624][1 ms][INFO] === Request start === [2025-09-07 11:48:12][356356900233624][1 ms][DEBUG] START check_scloud [2025-09-07 11:48:12][356356900233624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:48:12][356356900233624][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 23777 12330 23957908 150572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:48:12][356356900233624][315 ms][DEBUG] targetPkg: running [2025-09-07 11:48:12][356356900233624][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 11:48:12][356356900233624][315 ms][DEBUG] START check_boot_completed [2025-09-07 11:48:12][356356900233624][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:48:12][356356900233624][360 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 11:48:12][356356900233624][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:48:12][356356900233624][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:48:12][356356900233624][407 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 11:48:12][356356900233624][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 11:48:12][356356900233624][548 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=106530 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 844\nsuccessfulTxPacketsPerSecond: 9.450107931099536\nretriedTxPackets: 110\nretriedTxPacketsPerSecond: 1.105300009263046\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 865\nsuccessfulRxPacketsPerSecond: 9.616123050533819\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 11:48:12][356356900233624][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 11:48:13][356356900233624][954 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.890/254.890/254.890/0.000 ms\n [2025-09-07 11:48:13][356356900233624][954 ms][DEBUG] check_internet: online [2025-09-07 11:48:13][356356900233624][954 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:48:13][356356900233624][954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356900233624\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PKD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-09-07 11:48:13][356356900233624][954 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:48:13][356356900233624][954 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356900233624\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PKD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-09-07 11:48:18][356356900233624][6249 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac287523-1c06-4c47-8f3b-6521f735936e","id":"QR_ac287523-1c06-4c47-8f3b-6521f735936e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:48:18][356356900233624][6406 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-09-07 11:48:18][356356900233624][6406 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-09-07 11:48:18][356356900233624][6406 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:53:03][359468678355377][1 ms][INFO] === Request start === [2025-09-07 11:53:03][359468678355377][1 ms][DEBUG] START check_scloud [2025-09-07 11:53:03][359468678355377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:53:04][359468678355377][273 ms][DEBUG] SU: done in 271 ms; outu0_a118 23777 12330 24073684 162056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:53:04][359468678355377][273 ms][DEBUG] targetPkg: running [2025-09-07 11:53:04][359468678355377][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-07 11:53:04][359468678355377][273 ms][DEBUG] START check_boot_completed [2025-09-07 11:53:04][359468678355377][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:53:04][359468678355377][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:53:04][359468678355377][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:53:04][359468678355377][368 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 11:53:04][359468678355377][368 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 11:53:04][359468678355377][368 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:53:04][359468678355377][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678355377\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1297\"}'\'' -e'"" [2025-09-07 11:53:04][359468678355377][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:53:04][359468678355377][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678355377\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1297\"}'\'' -e'"" [2025-09-07 11:53:08][359468678355377][4725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c785a18-1a9e-45c1-bff7-0a531a2ae626","id":"QR_0c785a18-1a9e-45c1-bff7-0a531a2ae626","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:53:08][359468678355377][4881 ms][DEBUG] proc_open done in 4513 ms; code=255; res.len=3343 [2025-09-07 11:53:08][359468678355377][4881 ms][DEBUG] END runCmdUntilRes#1 in 4513 ms [2025-09-07 11:53:08][359468678355377][4881 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:53:11][359468678355377][0 ms][INFO] === Request start === [2025-09-07 11:53:11][359468678355377][1 ms][DEBUG] START check_scloud [2025-09-07 11:53:11][359468678355377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:53:11][359468678355377][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 23777 12330 24197852 172972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:53:11][359468678355377][310 ms][DEBUG] targetPkg: running [2025-09-07 11:53:11][359468678355377][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 11:53:11][359468678355377][310 ms][DEBUG] START check_boot_completed [2025-09-07 11:53:11][359468678355377][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:53:11][359468678355377][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:53:11][359468678355377][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:53:11][359468678355377][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:53:11][359468678355377][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:53:11][359468678355377][420 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:53:11][359468678355377][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678355377\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7778\"}'\'' -e'"" [2025-09-07 11:53:11][359468678355377][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:53:11][359468678355377][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678355377\",\"model\":\"SM-E156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7778\"}'\'' -e'"" [2025-09-07 11:53:16][359468678355377][5496 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45e7e0a8-2391-4d47-a289-5b65a4c75e48","id":"QR_45e7e0a8-2391-4d47-a289-5b65a4c75e48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:53:16][359468678355377][5652 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-07 11:53:16][359468678355377][5652 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-07 11:53:16][359468678355377][5653 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:55:03][352616440513585][1 ms][INFO] === Request start === [2025-09-07 11:55:03][352616440513585][1 ms][DEBUG] START check_scloud [2025-09-07 11:55:03][352616440513585][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:55:03][352616440513585][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 23777 12330 24344476 185108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:55:03][352616440513585][313 ms][DEBUG] targetPkg: running [2025-09-07 11:55:03][352616440513585][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 11:55:03][352616440513585][313 ms][DEBUG] START check_boot_completed [2025-09-07 11:55:03][352616440513585][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:55:03][352616440513585][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 11:55:03][352616440513585][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:55:03][352616440513585][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:55:03][352616440513585][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 11:55:03][352616440513585][422 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:55:03][352616440513585][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352616440513585\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8324\"}'\'' -e'"" [2025-09-07 11:55:03][352616440513585][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:55:03][352616440513585][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352616440513585\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8324\"}'\'' -e'"" [2025-09-07 11:55:08][352616440513585][5530 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b1d1d09-8311-4fec-8a82-a74a7f000bdb","id":"QR_9b1d1d09-8311-4fec-8a82-a74a7f000bdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:55:09][352616440513585][5686 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-07 11:55:09][352616440513585][5687 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-07 11:55:09][352616440513585][5687 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:55:11][352616440513585][1 ms][INFO] === Request start === [2025-09-07 11:55:11][352616440513585][1 ms][DEBUG] START check_scloud [2025-09-07 11:55:11][352616440513585][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:55:11][352616440513585][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 23777 12330 24470692 195432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:55:11][352616440513585][307 ms][DEBUG] targetPkg: running [2025-09-07 11:55:11][352616440513585][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 11:55:11][352616440513585][307 ms][DEBUG] START check_boot_completed [2025-09-07 11:55:11][352616440513585][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:55:11][352616440513585][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:55:11][352616440513585][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:55:11][352616440513585][415 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 11:55:11][352616440513585][415 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 11:55:11][352616440513585][415 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:55:11][352616440513585][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352616440513585\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4578\"}'\'' -e'"" [2025-09-07 11:55:11][352616440513585][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:55:11][352616440513585][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352616440513585\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4578\"}'\'' -e'"" [2025-09-07 11:55:16][352616440513585][5336 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_906e3dcc-97a9-48b6-b59a-d240d9a3f63a","id":"QR_906e3dcc-97a9-48b6-b59a-d240d9a3f63a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:55:16][352616440513585][5492 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-07 11:55:16][352616440513585][5492 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-07 11:55:16][352616440513585][5492 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:57:03][351270413165196][0 ms][INFO] === Request start === [2025-09-07 11:57:03][351270413165196][1 ms][DEBUG] START check_scloud [2025-09-07 11:57:03][351270413165196][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:57:04][351270413165196][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 23777 12330 24600932 207744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:57:04][351270413165196][317 ms][DEBUG] targetPkg: running [2025-09-07 11:57:04][351270413165196][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 11:57:04][351270413165196][317 ms][DEBUG] START check_boot_completed [2025-09-07 11:57:04][351270413165196][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:57:04][351270413165196][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 11:57:04][351270413165196][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:57:04][351270413165196][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:57:04][351270413165196][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 11:57:04][351270413165196][410 ms][DEBUG] rawBody.length=1150 [2025-09-07 11:57:04][351270413165196][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270413165196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1909\"}'\'' -e'"" [2025-09-07 11:57:04][351270413165196][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:57:04][351270413165196][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270413165196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1909\"}'\'' -e'"" [2025-09-07 11:57:09][351270413165196][5284 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac5ccdef-d0b8-4823-a642-9a8d913ecaac","id":"QR_ac5ccdef-d0b8-4823-a642-9a8d913ecaac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:57:09][351270413165196][5440 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-07 11:57:09][351270413165196][5440 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-07 11:57:09][351270413165196][5440 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 11:57:11][351270413165196][0 ms][INFO] === Request start === [2025-09-07 11:57:11][351270413165196][1 ms][DEBUG] START check_scloud [2025-09-07 11:57:11][351270413165196][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 11:57:11][351270413165196][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 23777 12330 24738412 213672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 11:57:11][351270413165196][321 ms][DEBUG] targetPkg: running [2025-09-07 11:57:11][351270413165196][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 11:57:11][351270413165196][321 ms][DEBUG] START check_boot_completed [2025-09-07 11:57:11][351270413165196][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 11:57:11][351270413165196][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 11:57:11][351270413165196][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 11:57:11][351270413165196][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 11:57:11][351270413165196][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 11:57:11][351270413165196][399 ms][DEBUG] rawBody.length=1160 [2025-09-07 11:57:11][351270413165196][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270413165196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7695\"}'\'' -e'"" [2025-09-07 11:57:11][351270413165196][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 11:57:11][351270413165196][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270413165196\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7695\"}'\'' -e'"" [2025-09-07 11:57:17][351270413165196][5461 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40d29128-0ea0-4c6e-9dd0-255b0f92066b","id":"QR_40d29128-0ea0-4c6e-9dd0-255b0f92066b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 11:57:17][351270413165196][5617 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 11:57:17][351270413165196][5617 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-07 11:57:17][351270413165196][5617 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:00:04][355362113158427][1 ms][INFO] === Request start === [2025-09-07 12:00:04][355362113158427][1 ms][DEBUG] START check_scloud [2025-09-07 12:00:04][355362113158427][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:00:04][355362113158427][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 23777 12330 24846124 225660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:00:04][355362113158427][291 ms][DEBUG] targetPkg: running [2025-09-07 12:00:04][355362113158427][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-07 12:00:04][355362113158427][291 ms][DEBUG] START check_boot_completed [2025-09-07 12:00:04][355362113158427][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:00:04][355362113158427][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:00:04][355362113158427][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:00:04][355362113158427][386 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 12:00:04][355362113158427][386 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 12:00:04][355362113158427][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:00:04][355362113158427][509 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=106530 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1554\nsuccessfulTxPacketsPerSecond: 0.5015478230831573\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.10960978915062378\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1494\nsuccessfulRxPacketsPerSecond: 0.45172519165105557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:00:04][355362113158427][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:00:06][355362113158427][1854 ms][DEBUG] SU: done in 1344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.220/305.220/305.220/0.000 ms\n [2025-09-07 12:00:06][355362113158427][1854 ms][DEBUG] check_internet: online [2025-09-07 12:00:06][355362113158427][1854 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:00:06][355362113158427][1854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362113158427\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2664\"}'\'' -e'"" [2025-09-07 12:00:06][355362113158427][1854 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:00:06][355362113158427][1854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362113158427\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2664\"}'\'' -e'"" [2025-09-07 12:00:10][355362113158427][6289 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ea45a0d-1d32-4a84-9f4a-b70b1f281509","id":"QR_8ea45a0d-1d32-4a84-9f4a-b70b1f281509","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:00:10][355362113158427][6445 ms][DEBUG] proc_open done in 4591 ms; code=255; res.len=3343 [2025-09-07 12:00:10][355362113158427][6446 ms][DEBUG] END runCmdUntilRes#1 in 4591 ms [2025-09-07 12:00:10][355362113158427][6446 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:00:13][355362113158427][0 ms][INFO] === Request start === [2025-09-07 12:00:13][355362113158427][1 ms][DEBUG] START check_scloud [2025-09-07 12:00:13][355362113158427][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:00:13][355362113158427][271 ms][DEBUG] SU: done in 271 ms; outu0_a118 23777 12330 25015224 235700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:00:13][355362113158427][271 ms][DEBUG] targetPkg: running [2025-09-07 12:00:13][355362113158427][271 ms][DEBUG] END check_scloud in 271 ms [2025-09-07 12:00:13][355362113158427][272 ms][DEBUG] START check_boot_completed [2025-09-07 12:00:13][355362113158427][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:00:13][355362113158427][318 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:00:13][355362113158427][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:00:13][355362113158427][396 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 12:00:13][355362113158427][396 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 12:00:13][355362113158427][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:00:13][355362113158427][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=106530 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1554\nsuccessfulTxPacketsPerSecond: 0.5015478230831573\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.10960978915062378\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1494\nsuccessfulRxPacketsPerSecond: 0.45172519165105557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:00:13][355362113158427][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:00:14][355362113158427][943 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=280 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 280.826/280.826/280.826/0.000 ms\n [2025-09-07 12:00:14][355362113158427][943 ms][DEBUG] check_internet: online [2025-09-07 12:00:14][355362113158427][943 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:00:14][355362113158427][943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362113158427\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2415\"}'\'' -e'"" [2025-09-07 12:00:14][355362113158427][943 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:00:14][355362113158427][943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362113158427\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2415\"}'\'' -e'"" [2025-09-07 12:00:22][355362113158427][9207 ms][DEBUG] proc_open done in 8264 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 12:00:22][355362113158427][9207 ms][DEBUG] END runCmdUntilRes#1 in 8264 ms [2025-09-07 12:00:22][355362113158427][9207 ms][WARN] Detected error: Process with pid 23777 either refused to load frida-agent, or terminated during injectionProcess with pid 23777 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 12:00:22][355362113158427][9207 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 12:00:22][355362113158427][9535 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 12:00:22][355362113158427][9535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 12:00:22][355362113158427][9676 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 12:00:22][355362113158427][9676 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 12:00:22][355362113158427][9676 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 12:00:23][355362113158427][10050 ms][DEBUG] SU: done in 374 ms; out [2025-09-07 12:00:23][355362113158427][10050 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 12:00:23][355362113158427][10363 ms][DEBUG] SU: done in 312 ms; out [2025-09-07 12:00:25][355362113158427][12378 ms][DEBUG] START check_boot_completed [2025-09-07 12:00:25][355362113158427][12378 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:00:25][355362113158427][12425 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:00:25][355362113158427][12425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:00:25][355362113158427][12487 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 12:00:25][355362113158427][12487 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 12:00:28][355362113158427][15502 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 12:00:28][355362113158427][15502 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362113158427\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2415\"}'\'' -e'"" [2025-09-07 12:00:30][355362113158427][16986 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 12:00:30][355362113158427][16986 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-09-07 12:00:30][355362113158427][16986 ms][WARN] Detected error 2; Reboot the device [2025-09-07 12:00:30][355362113158427][16986 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 12:00:30][355362113158427][17267 ms][DEBUG] SU: done in 281 ms; outsystem 26177 25845 7926228 145732 0 0 R system_server\n [2025-09-07 12:00:30][355362113158427][17267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 12:00:30][355362113158427][17861 ms][DEBUG] SU: done in 594 ms; out [2025-09-07 12:04:03][357450470127503][1 ms][INFO] === Request start === [2025-09-07 12:04:03][357450470127503][1 ms][DEBUG] START check_scloud [2025-09-07 12:04:03][357450470127503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:04:04][357450470127503][302 ms][DEBUG] SU: done in 301 ms; out [2025-09-07 12:04:04][357450470127503][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 12:04:04][357450470127503][334 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 12:04:04][357450470127503][334 ms][DEBUG] check_devices: device found [2025-09-07 12:04:04][357450470127503][334 ms][WARN] targetPkg: not running, restarting [2025-09-07 12:04:04][357450470127503][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 12:04:04][357450470127503][459 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 12:04:04][357450470127503][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 12:04:04][357450470127503][646 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 12:04:06][357450470127503][2661 ms][DEBUG] END check_scloud in 2660 ms [2025-09-07 12:04:06][357450470127503][2661 ms][DEBUG] START check_boot_completed [2025-09-07 12:04:06][357450470127503][2661 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:04:06][357450470127503][2708 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:04:06][357450470127503][2708 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:04:06][357450470127503][2755 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:04:06][357450470127503][2755 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 12:04:06][357450470127503][2755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:04:06][357450470127503][2864 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 241\nsuccessfulTxPacketsPerSecond: 8.885821531036445\nretriedTxPackets: 39\nretriedTxPacketsPerSecond: 1.9746270068969882\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 209\nsuccessfulRxPacketsPerSecond: 7.734186637604585\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:04:06][357450470127503][2865 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:04:07][357450470127503][3567 ms][DEBUG] SU: done in 703 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.035/221.035/221.035/0.000 ms\n [2025-09-07 12:04:07][357450470127503][3567 ms][DEBUG] check_internet: online [2025-09-07 12:04:07][357450470127503][3568 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:04:07][357450470127503][3568 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470127503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5246\"}'\'' -e'"" [2025-09-07 12:04:07][357450470127503][3568 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:04:07][357450470127503][3568 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470127503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5246\"}'\'' -e'"" [2025-09-07 12:04:12][357450470127503][8285 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efcbd53c-9a0f-43d9-ae2f-99c916d0594d","id":"QR_efcbd53c-9a0f-43d9-ae2f-99c916d0594d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:04:12][357450470127503][8441 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-07 12:04:12][357450470127503][8441 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-07 12:04:12][357450470127503][8441 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:04:14][357450470127503][0 ms][INFO] === Request start === [2025-09-07 12:04:14][357450470127503][1 ms][DEBUG] START check_scloud [2025-09-07 12:04:14][357450470127503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:04:14][357450470127503][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 16437 4969 23888956 124992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:04:14][357450470127503][294 ms][DEBUG] targetPkg: running [2025-09-07 12:04:14][357450470127503][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-07 12:04:14][357450470127503][294 ms][DEBUG] START check_boot_completed [2025-09-07 12:04:14][357450470127503][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:04:14][357450470127503][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:04:14][357450470127503][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:04:15][357450470127503][403 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 12:04:15][357450470127503][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 12:04:15][357450470127503][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:04:15][357450470127503][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 241\nsuccessfulTxPacketsPerSecond: 8.885821531036445\nretriedTxPackets: 39\nretriedTxPacketsPerSecond: 1.9746270068969882\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 209\nsuccessfulRxPacketsPerSecond: 7.734186637604585\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:04:15][357450470127503][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:04:15][357450470127503][872 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.430/255.430/255.430/0.000 ms\n [2025-09-07 12:04:15][357450470127503][872 ms][DEBUG] check_internet: online [2025-09-07 12:04:15][357450470127503][872 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:04:15][357450470127503][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470127503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4911\"}'\'' -e'"" [2025-09-07 12:04:15][357450470127503][873 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:04:15][357450470127503][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470127503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4911\"}'\'' -e'"" [2025-09-07 12:04:20][357450470127503][6230 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9acc470-c5c7-4a44-baf1-a4c467d223b7","id":"QR_e9acc470-c5c7-4a44-baf1-a4c467d223b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:04:21][357450470127503][6386 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 12:04:21][357450470127503][6386 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 12:04:21][357450470127503][6386 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:07:03][352397452844297][1 ms][INFO] === Request start === [2025-09-07 12:07:03][352397452844297][1 ms][DEBUG] START check_scloud [2025-09-07 12:07:03][352397452844297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:07:03][352397452844297][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 16437 4969 23977832 139056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:07:03][352397452844297][332 ms][DEBUG] targetPkg: running [2025-09-07 12:07:03][352397452844297][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-07 12:07:03][352397452844297][333 ms][DEBUG] START check_boot_completed [2025-09-07 12:07:03][352397452844297][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:07:03][352397452844297][364 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:07:03][352397452844297][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:07:04][352397452844297][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:07:04][352397452844297][411 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:07:04][352397452844297][411 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:07:04][352397452844297][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452844297\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9329\"}'\'' -e'"" [2025-09-07 12:07:04][352397452844297][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:07:04][352397452844297][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452844297\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9329\"}'\'' -e'"" [2025-09-07 12:07:08][352397452844297][5175 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b75c027-6d9d-4299-aa76-22114587975e","id":"QR_3b75c027-6d9d-4299-aa76-22114587975e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:07:08][352397452844297][5331 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-07 12:07:08][352397452844297][5331 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-07 12:07:08][352397452844297][5331 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:07:11][352397452844297][0 ms][INFO] === Request start === [2025-09-07 12:07:11][352397452844297][1 ms][DEBUG] START check_scloud [2025-09-07 12:07:11][352397452844297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:07:11][352397452844297][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 16437 4969 24142960 150624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:07:11][352397452844297][262 ms][DEBUG] targetPkg: running [2025-09-07 12:07:11][352397452844297][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-07 12:07:11][352397452844297][262 ms][DEBUG] START check_boot_completed [2025-09-07 12:07:11][352397452844297][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:07:11][352397452844297][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:07:11][352397452844297][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:07:11][352397452844297][371 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 12:07:11][352397452844297][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 12:07:11][352397452844297][371 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:07:11][352397452844297][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452844297\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4092\"}'\'' -e'"" [2025-09-07 12:07:11][352397452844297][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:07:11][352397452844297][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452844297\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4092\"}'\'' -e'"" [2025-09-07 12:07:16][352397452844297][5541 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c379d283-7c00-4c11-862d-00625ba06689","id":"QR_c379d283-7c00-4c11-862d-00625ba06689","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:07:17][352397452844297][5698 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-09-07 12:07:17][352397452844297][5698 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-09-07 12:07:17][352397452844297][5698 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:10:04][352665184233314][1 ms][INFO] === Request start === [2025-09-07 12:10:04][352665184233314][1 ms][DEBUG] START check_scloud [2025-09-07 12:10:04][352665184233314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:10:04][352665184233314][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 16437 4969 24244464 162060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:10:04][352665184233314][304 ms][DEBUG] targetPkg: running [2025-09-07 12:10:04][352665184233314][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 12:10:04][352665184233314][304 ms][DEBUG] START check_boot_completed [2025-09-07 12:10:04][352665184233314][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:10:04][352665184233314][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:10:04][352665184233314][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:10:04][352665184233314][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:10:04][352665184233314][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:10:04][352665184233314][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:10:04][352665184233314][492 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 967\nsuccessfulTxPacketsPerSecond: 2.6471328197069193\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.3901421648879344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 976\nsuccessfulRxPacketsPerSecond: 2.796626546439679\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:10:04][352665184233314][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:10:06][352665184233314][1929 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.294/293.294/293.294/0.000 ms\n [2025-09-07 12:10:06][352665184233314][1929 ms][DEBUG] check_internet: online [2025-09-07 12:10:06][352665184233314][1929 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:10:06][352665184233314][1929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665184233314\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8727\"}'\'' -e'"" [2025-09-07 12:10:06][352665184233314][1929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:10:06][352665184233314][1929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665184233314\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8727\"}'\'' -e'"" [2025-09-07 12:10:09][352665184233314][5568 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e53f575-61b4-481f-ab53-924639a744c4","id":"QR_9e53f575-61b4-481f-ab53-924639a744c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:10:09][352665184233314][5724 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-07 12:10:09][352665184233314][5725 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-09-07 12:10:09][352665184233314][5725 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:10:12][352665184233314][0 ms][INFO] === Request start === [2025-09-07 12:10:12][352665184233314][1 ms][DEBUG] START check_scloud [2025-09-07 12:10:12][352665184233314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:10:12][352665184233314][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 16437 4969 24364472 172776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:10:12][352665184233314][296 ms][DEBUG] targetPkg: running [2025-09-07 12:10:12][352665184233314][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 12:10:12][352665184233314][297 ms][DEBUG] START check_boot_completed [2025-09-07 12:10:12][352665184233314][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:10:12][352665184233314][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:10:12][352665184233314][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:10:12][352665184233314][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 12:10:12][352665184233314][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 12:10:12][352665184233314][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:10:12][352665184233314][562 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 967\nsuccessfulTxPacketsPerSecond: 2.6471328197069193\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.3901421648879344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 976\nsuccessfulRxPacketsPerSecond: 2.796626546439679\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:10:12][352665184233314][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:10:13][352665184233314][999 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=345 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 345.316/345.316/345.316/0.000 ms\n [2025-09-07 12:10:13][352665184233314][999 ms][DEBUG] check_internet: online [2025-09-07 12:10:13][352665184233314][999 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:10:13][352665184233314][999 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665184233314\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4359\"}'\'' -e'"" [2025-09-07 12:10:13][352665184233314][999 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:10:13][352665184233314][999 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665184233314\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4359\"}'\'' -e'"" [2025-09-07 12:10:18][352665184233314][6263 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63dcb055-a081-48a3-a3ba-3d2a70a55ba1","id":"QR_63dcb055-a081-48a3-a3ba-3d2a70a55ba1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:10:18][352665184233314][6420 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-07 12:10:18][352665184233314][6420 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-07 12:10:18][352665184233314][6420 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:12:04][354203110459510][0 ms][INFO] === Request start === [2025-09-07 12:12:04][354203110459510][1 ms][DEBUG] START check_scloud [2025-09-07 12:12:04][354203110459510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:12:04][354203110459510][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 16437 4969 24470008 184508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:12:04][354203110459510][314 ms][DEBUG] targetPkg: running [2025-09-07 12:12:04][354203110459510][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 12:12:04][354203110459510][314 ms][DEBUG] START check_boot_completed [2025-09-07 12:12:04][354203110459510][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:12:04][354203110459510][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:12:04][354203110459510][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:12:04][354203110459510][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:12:04][354203110459510][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:12:04][354203110459510][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:12:04][354203110459510][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1166\nsuccessfulTxPacketsPerSecond: 0.6607037324780706\nretriedTxPackets: 201\nretriedTxPacketsPerSecond: 0.18260655922760746\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1152\nsuccessfulRxPacketsPerSecond: 0.5843409895283439\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:12:04][354203110459510][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:12:04][354203110459510][908 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.450/299.450/299.450/0.000 ms\n [2025-09-07 12:12:04][354203110459510][908 ms][DEBUG] check_internet: online [2025-09-07 12:12:04][354203110459510][908 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:12:04][354203110459510][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203110459510\",\"model\":\"SM-G986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2031\"}'\'' -e'"" [2025-09-07 12:12:04][354203110459510][908 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:12:04][354203110459510][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203110459510\",\"model\":\"SM-G986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2031\"}'\'' -e'"" [2025-09-07 12:12:10][354203110459510][6468 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47087f8b-efdf-46c6-a2e4-34f4b7ff0146","id":"QR_47087f8b-efdf-46c6-a2e4-34f4b7ff0146","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:12:10][354203110459510][6625 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-07 12:12:10][354203110459510][6625 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-07 12:12:10][354203110459510][6625 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:12:13][354203110459510][1 ms][INFO] === Request start === [2025-09-07 12:12:13][354203110459510][1 ms][DEBUG] START check_scloud [2025-09-07 12:12:13][354203110459510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:12:13][354203110459510][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 16437 4969 24608512 194404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:12:13][354203110459510][288 ms][DEBUG] targetPkg: running [2025-09-07 12:12:13][354203110459510][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 12:12:13][354203110459510][288 ms][DEBUG] START check_boot_completed [2025-09-07 12:12:13][354203110459510][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:12:13][354203110459510][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:12:13][354203110459510][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:12:13][354203110459510][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 12:12:13][354203110459510][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 12:12:13][354203110459510][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:12:13][354203110459510][538 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1166\nsuccessfulTxPacketsPerSecond: 0.6607037324780706\nretriedTxPackets: 201\nretriedTxPacketsPerSecond: 0.18260655922760746\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1152\nsuccessfulRxPacketsPerSecond: 0.5843409895283439\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:12:13][354203110459510][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:12:13][354203110459510][913 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.009/275.009/275.009/0.000 ms\n [2025-09-07 12:12:13][354203110459510][913 ms][DEBUG] check_internet: online [2025-09-07 12:12:13][354203110459510][913 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:12:13][354203110459510][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203110459510\",\"model\":\"SM-G986N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6196\"}'\'' -e'"" [2025-09-07 12:12:13][354203110459510][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:12:13][354203110459510][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354203110459510\",\"model\":\"SM-G986N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6196\"}'\'' -e'"" [2025-09-07 12:12:19][354203110459510][6068 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10664016-51b6-4580-b2d4-636998586b6a","id":"QR_10664016-51b6-4580-b2d4-636998586b6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:12:19][354203110459510][6224 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 12:12:19][354203110459510][6224 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 12:12:19][354203110459510][6224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:12:23][354838354269909][0 ms][INFO] === Request start === [2025-09-07 12:12:23][354838354269909][1 ms][DEBUG] START check_scloud [2025-09-07 12:12:23][354838354269909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:12:23][354838354269909][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 16437 4969 24736776 205992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:12:23][354838354269909][283 ms][DEBUG] targetPkg: running [2025-09-07 12:12:23][354838354269909][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-07 12:12:23][354838354269909][283 ms][DEBUG] START check_boot_completed [2025-09-07 12:12:23][354838354269909][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:12:23][354838354269909][329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:12:23][354838354269909][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:12:23][354838354269909][409 ms][DEBUG] SU: done in 79 ms; out [2025-09-07 12:12:23][354838354269909][409 ms][DEBUG] END check_boot_completed in 126 ms [2025-09-07 12:12:23][354838354269909][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:12:24][354838354269909][548 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1166\nsuccessfulTxPacketsPerSecond: 0.6607037324780706\nretriedTxPackets: 201\nretriedTxPacketsPerSecond: 0.18260655922760746\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1152\nsuccessfulRxPacketsPerSecond: 0.5843409895283439\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:12:24][354838354269909][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:12:24][354838354269909][985 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.029/294.029/294.029/0.000 ms\n [2025-09-07 12:12:24][354838354269909][986 ms][DEBUG] check_internet: online [2025-09-07 12:12:24][354838354269909][986 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:12:24][354838354269909][986 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838354269909\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1687\"}'\'' -e'"" [2025-09-07 12:12:24][354838354269909][986 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:12:24][354838354269909][986 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838354269909\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1687\"}'\'' -e'"" [2025-09-07 12:12:27][354838354269909][4359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a0ccc48-1178-4787-a2ee-5e1c320d6405","id":"QR_3a0ccc48-1178-4787-a2ee-5e1c320d6405","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:12:27][354838354269909][4516 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-07 12:12:27][354838354269909][4516 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-07 12:12:27][354838354269909][4516 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:12:30][354838354269909][0 ms][INFO] === Request start === [2025-09-07 12:12:30][354838354269909][1 ms][DEBUG] START check_scloud [2025-09-07 12:12:30][354838354269909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:12:30][354838354269909][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 16437 4969 24856688 215732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:12:30][354838354269909][288 ms][DEBUG] targetPkg: running [2025-09-07 12:12:30][354838354269909][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 12:12:30][354838354269909][288 ms][DEBUG] START check_boot_completed [2025-09-07 12:12:30][354838354269909][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:12:30][354838354269909][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:12:30][354838354269909][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:12:30][354838354269909][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:12:30][354838354269909][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 12:12:30][354838354269909][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:12:30][354838354269909][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1166\nsuccessfulTxPacketsPerSecond: 0.6607037324780706\nretriedTxPackets: 201\nretriedTxPacketsPerSecond: 0.18260655922760746\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1152\nsuccessfulRxPacketsPerSecond: 0.5843409895283439\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:12:30][354838354269909][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:12:31][354838354269909][960 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.052/319.052/319.052/0.000 ms\n [2025-09-07 12:12:31][354838354269909][960 ms][DEBUG] check_internet: online [2025-09-07 12:12:31][354838354269909][960 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:12:31][354838354269909][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838354269909\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-07 12:12:31][354838354269909][960 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:12:31][354838354269909][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838354269909\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-07 12:12:36][354838354269909][5615 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2ae1046-2037-4686-9437-f721decd0682","id":"QR_f2ae1046-2037-4686-9437-f721decd0682","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:12:36][354838354269909][5771 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 12:12:36][354838354269909][5771 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 12:12:36][354838354269909][5771 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:13:07][352177395977705][0 ms][INFO] === Request start === [2025-09-07 12:13:07][352177395977705][1 ms][DEBUG] START check_scloud [2025-09-07 12:13:07][352177395977705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:13:08][352177395977705][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 16437 4969 24986380 223912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:13:08][352177395977705][309 ms][DEBUG] targetPkg: running [2025-09-07 12:13:08][352177395977705][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 12:13:08][352177395977705][309 ms][DEBUG] START check_boot_completed [2025-09-07 12:13:08][352177395977705][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:13:08][352177395977705][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:13:08][352177395977705][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:13:08][352177395977705][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:13:08][352177395977705][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 12:13:08][352177395977705][403 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:13:08][352177395977705][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395977705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3080\"}'\'' -e'"" [2025-09-07 12:13:08][352177395977705][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:13:08][352177395977705][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395977705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3080\"}'\'' -e'"" [2025-09-07 12:13:12][352177395977705][4948 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d7cfb86-3797-4dd1-aed7-3ed708e3dbf4","id":"QR_6d7cfb86-3797-4dd1-aed7-3ed708e3dbf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:13:13][352177395977705][5104 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-07 12:13:13][352177395977705][5104 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-07 12:13:13][352177395977705][5105 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:15:03][353497474016376][1 ms][INFO] === Request start === [2025-09-07 12:15:03][353497474016376][1 ms][DEBUG] START check_scloud [2025-09-07 12:15:03][353497474016376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:15:03][353497474016376][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 16437 4969 25114608 234968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:15:03][353497474016376][254 ms][DEBUG] targetPkg: running [2025-09-07 12:15:03][353497474016376][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-07 12:15:03][353497474016376][255 ms][DEBUG] START check_boot_completed [2025-09-07 12:15:03][353497474016376][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:15:03][353497474016376][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:15:03][353497474016376][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:15:03][353497474016376][395 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 12:15:03][353497474016376][395 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-07 12:15:03][353497474016376][395 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:15:03][353497474016376][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474016376\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4309\"}'\'' -e'"" [2025-09-07 12:15:03][353497474016376][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:15:03][353497474016376][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474016376\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4309\"}'\'' -e'"" [2025-09-07 12:15:07][353497474016376][4457 ms][DEBUG] proc_open done in 4061 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 12:15:07][353497474016376][4457 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-07 12:15:07][353497474016376][4457 ms][WARN] Detected error: Process with pid 16437 either refused to load frida-agent, or terminated during injectionProcess with pid 16437 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 12:15:07][353497474016376][4457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 12:15:08][353497474016376][4738 ms][DEBUG] SU: done in 281 ms; outsystem 5392 4969 12861620 273756 ep_poll 0 S system_server\n [2025-09-07 12:15:08][353497474016376][4738 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 12:15:08][353497474016376][4878 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 12:15:08][353497474016376][4878 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 12:15:08][353497474016376][4878 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 12:15:08][353497474016376][5003 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 12:15:08][353497474016376][5003 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 12:15:08][353497474016376][5191 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 12:15:10][353497474016376][7206 ms][DEBUG] START check_boot_completed [2025-09-07 12:15:10][353497474016376][7206 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:15:10][353497474016376][7253 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:15:10][353497474016376][7253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:15:10][353497474016376][7315 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 12:15:10][353497474016376][7315 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 12:15:13][353497474016376][10330 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 12:15:13][353497474016376][10330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474016376\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4309\"}'\'' -e'"" [2025-09-07 12:15:17][353497474016376][14017 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1c28ea6-6159-4e69-a02a-09946ddc0d94","id":"QR_c1c28ea6-6159-4e69-a02a-09946ddc0d94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:15:17][353497474016376][14173 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-09-07 12:15:17][353497474016376][14173 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-09-07 12:15:17][353497474016376][14173 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:15:19][353497474016376][0 ms][INFO] === Request start === [2025-09-07 12:15:19][353497474016376][1 ms][DEBUG] START check_scloud [2025-09-07 12:15:19][353497474016376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:15:20][353497474016376][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 18420 4969 23889628 124580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:15:20][353497474016376][240 ms][DEBUG] targetPkg: running [2025-09-07 12:15:20][353497474016376][240 ms][DEBUG] END check_scloud in 239 ms [2025-09-07 12:15:20][353497474016376][240 ms][DEBUG] START check_boot_completed [2025-09-07 12:15:20][353497474016376][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:15:20][353497474016376][286 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:15:20][353497474016376][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:15:20][353497474016376][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:15:20][353497474016376][333 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 12:15:20][353497474016376][333 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:15:20][353497474016376][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474016376\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1041\"}'\'' -e'"" [2025-09-07 12:15:20][353497474016376][334 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:15:20][353497474016376][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497474016376\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1041\"}'\'' -e'"" [2025-09-07 12:15:24][353497474016376][5098 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de17eb63-ed86-45c5-bbba-d26957256fe4","id":"QR_de17eb63-ed86-45c5-bbba-d26957256fe4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:15:25][353497474016376][5254 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-07 12:15:25][353497474016376][5254 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-07 12:15:25][353497474016376][5254 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:18:03][350482805007321][1 ms][INFO] === Request start === [2025-09-07 12:18:03][350482805007321][1 ms][DEBUG] START check_scloud [2025-09-07 12:18:03][350482805007321][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:18:03][350482805007321][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18420 4969 23979596 137736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:18:03][350482805007321][306 ms][DEBUG] targetPkg: running [2025-09-07 12:18:03][350482805007321][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 12:18:03][350482805007321][306 ms][DEBUG] START check_boot_completed [2025-09-07 12:18:03][350482805007321][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:18:03][350482805007321][336 ms][DEBUG] ADB: done in 29 ms; out [2025-09-07 12:18:03][350482805007321][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:18:03][350482805007321][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:18:03][350482805007321][383 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 12:18:03][350482805007321][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:18:04][350482805007321][492 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1404\nsuccessfulTxPacketsPerSecond: 0.7904403217557074\nretriedTxPackets: 265\nretriedTxPacketsPerSecond: 0.21255538064019025\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1356\nsuccessfulRxPacketsPerSecond: 0.6775202757906064\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:18:04][350482805007321][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:18:05][350482805007321][1929 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.530/300.530/300.530/0.000 ms\n [2025-09-07 12:18:05][350482805007321][1929 ms][DEBUG] check_internet: online [2025-09-07 12:18:05][350482805007321][1929 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:18:05][350482805007321][1929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482805007321\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1827\"}'\'' -e'"" [2025-09-07 12:18:05][350482805007321][1929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:18:05][350482805007321][1929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482805007321\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1827\"}'\'' -e'"" [2025-09-07 12:18:09][350482805007321][5522 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d55568e7-fe64-4dc0-a6e5-c41789438eed","id":"QR_d55568e7-fe64-4dc0-a6e5-c41789438eed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:18:09][350482805007321][5678 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-07 12:18:09][350482805007321][5678 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-07 12:18:09][350482805007321][5678 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:18:11][350482805007321][0 ms][INFO] === Request start === [2025-09-07 12:18:11][350482805007321][1 ms][DEBUG] START check_scloud [2025-09-07 12:18:11][350482805007321][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:18:11][350482805007321][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 18420 4969 24152852 149736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:18:11][350482805007321][320 ms][DEBUG] targetPkg: running [2025-09-07 12:18:11][350482805007321][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 12:18:11][350482805007321][320 ms][DEBUG] START check_boot_completed [2025-09-07 12:18:11][350482805007321][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:18:11][350482805007321][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:18:11][350482805007321][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:18:12][350482805007321][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:18:12][350482805007321][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 12:18:12][350482805007321][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:18:12][350482805007321][523 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1404\nsuccessfulTxPacketsPerSecond: 0.7904403217557074\nretriedTxPackets: 265\nretriedTxPacketsPerSecond: 0.21255538064019025\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1356\nsuccessfulRxPacketsPerSecond: 0.6775202757906064\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:18:12][350482805007321][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:18:12][350482805007321][977 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.485/327.485/327.485/0.000 ms\n [2025-09-07 12:18:12][350482805007321][977 ms][DEBUG] check_internet: online [2025-09-07 12:18:12][350482805007321][977 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:18:12][350482805007321][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482805007321\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3110\"}'\'' -e'"" [2025-09-07 12:18:12][350482805007321][977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:18:12][350482805007321][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482805007321\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3110\"}'\'' -e'"" [2025-09-07 12:18:17][350482805007321][5834 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dff13776-5d9a-42de-95de-32687a57dc96","id":"QR_dff13776-5d9a-42de-95de-32687a57dc96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:18:17][350482805007321][5990 ms][DEBUG] proc_open done in 5013 ms; code=255; res.len=3343 [2025-09-07 12:18:17][350482805007321][5990 ms][DEBUG] END runCmdUntilRes#1 in 5013 ms [2025-09-07 12:18:17][350482805007321][5990 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:42:03][352469858874283][1 ms][INFO] === Request start === [2025-09-07 12:42:03][352469858874283][1 ms][DEBUG] START check_scloud [2025-09-07 12:42:03][352469858874283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:42:03][352469858874283][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18420 4969 24283976 112320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:42:03][352469858874283][313 ms][DEBUG] targetPkg: running [2025-09-07 12:42:03][352469858874283][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 12:42:03][352469858874283][313 ms][DEBUG] START check_boot_completed [2025-09-07 12:42:03][352469858874283][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:42:03][352469858874283][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:42:03][352469858874283][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:42:03][352469858874283][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:42:03][352469858874283][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:42:03][352469858874283][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:42:03][352469858874283][502 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1853\nsuccessfulTxPacketsPerSecond: 0.1410151326864264\nretriedTxPackets: 319\nretriedTxPacketsPerSecond: 0.0176268915858033\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1760\nsuccessfulRxPacketsPerSecond: 0.1410151326864264\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:42:03][352469858874283][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:42:05][352469858874283][1906 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.423/303.423/303.423/0.000 ms\n [2025-09-07 12:42:05][352469858874283][1907 ms][DEBUG] check_internet: online [2025-09-07 12:42:05][352469858874283][1907 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:42:05][352469858874283][1907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858874283\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5177\"}'\'' -e'"" [2025-09-07 12:42:05][352469858874283][1907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:42:05][352469858874283][1907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858874283\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5177\"}'\'' -e'"" [2025-09-07 12:42:09][352469858874283][5905 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_781eb04a-c283-4637-985e-4e69e0c58699","id":"QR_781eb04a-c283-4637-985e-4e69e0c58699","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:42:09][352469858874283][6061 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-07 12:42:09][352469858874283][6062 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-07 12:42:09][352469858874283][6062 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:42:11][352469858874283][0 ms][INFO] === Request start === [2025-09-07 12:42:11][352469858874283][1 ms][DEBUG] START check_scloud [2025-09-07 12:42:11][352469858874283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:42:12][352469858874283][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 18420 4969 24458396 125400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:42:12][352469858874283][302 ms][DEBUG] targetPkg: running [2025-09-07 12:42:12][352469858874283][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 12:42:12][352469858874283][303 ms][DEBUG] START check_boot_completed [2025-09-07 12:42:12][352469858874283][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:42:12][352469858874283][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:42:12][352469858874283][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:42:12][352469858874283][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 12:42:12][352469858874283][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 12:42:12][352469858874283][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:42:12][352469858874283][537 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1853\nsuccessfulTxPacketsPerSecond: 0.1410151326864264\nretriedTxPackets: 319\nretriedTxPacketsPerSecond: 0.0176268915858033\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1760\nsuccessfulRxPacketsPerSecond: 0.1410151326864264\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:42:12][352469858874283][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:42:12][352469858874283][864 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.024/227.024/227.024/0.000 ms\n [2025-09-07 12:42:12][352469858874283][865 ms][DEBUG] check_internet: online [2025-09-07 12:42:12][352469858874283][865 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:42:12][352469858874283][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858874283\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8637\"}'\'' -e'"" [2025-09-07 12:42:12][352469858874283][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:42:12][352469858874283][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858874283\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8637\"}'\'' -e'"" [2025-09-07 12:42:18][352469858874283][6316 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5166fec7-e93b-486f-94c3-4f5d5e3b6371","id":"QR_5166fec7-e93b-486f-94c3-4f5d5e3b6371","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:42:18][352469858874283][6473 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-07 12:42:18][352469858874283][6473 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-07 12:42:18][352469858874283][6473 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:49:03][351267961831807][1 ms][INFO] === Request start === [2025-09-07 12:49:03][351267961831807][1 ms][DEBUG] START check_scloud [2025-09-07 12:49:03][351267961831807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:49:04][351267961831807][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 18420 4969 24548624 135516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:49:04][351267961831807][314 ms][DEBUG] targetPkg: running [2025-09-07 12:49:04][351267961831807][314 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 12:49:04][351267961831807][314 ms][DEBUG] START check_boot_completed [2025-09-07 12:49:04][351267961831807][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:49:04][351267961831807][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:49:04][351267961831807][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:49:04][351267961831807][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:49:04][351267961831807][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:49:04][351267961831807][392 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:49:04][351267961831807][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961831807\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2964\"}'\'' -e'"" [2025-09-07 12:49:04][351267961831807][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:49:04][351267961831807][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961831807\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2964\"}'\'' -e'"" [2025-09-07 12:49:09][351267961831807][5797 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_832f9de9-3d57-4b92-a5bf-c2f426604218","id":"QR_832f9de9-3d57-4b92-a5bf-c2f426604218","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:49:09][351267961831807][5953 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-07 12:49:09][351267961831807][5953 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-07 12:49:09][351267961831807][5953 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:49:12][351267961831807][0 ms][INFO] === Request start === [2025-09-07 12:49:12][351267961831807][1 ms][DEBUG] START check_scloud [2025-09-07 12:49:12][351267961831807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:49:12][351267961831807][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 18420 4969 24725092 147368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:49:12][351267961831807][280 ms][DEBUG] targetPkg: running [2025-09-07 12:49:12][351267961831807][280 ms][DEBUG] END check_scloud in 280 ms [2025-09-07 12:49:12][351267961831807][280 ms][DEBUG] START check_boot_completed [2025-09-07 12:49:12][351267961831807][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:49:12][351267961831807][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:49:12][351267961831807][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:49:12][351267961831807][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:49:12][351267961831807][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 12:49:12][351267961831807][374 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:49:12][351267961831807][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961831807\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9280\"}'\'' -e'"" [2025-09-07 12:49:12][351267961831807][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:49:12][351267961831807][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961831807\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9280\"}'\'' -e'"" [2025-09-07 12:49:17][351267961831807][5466 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8096278-de49-4c66-971b-1dbb0549865d","id":"QR_b8096278-de49-4c66-971b-1dbb0549865d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:49:17][351267961831807][5622 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-07 12:49:17][351267961831807][5622 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-07 12:49:17][351267961831807][5623 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:51:04][351272333434587][1 ms][INFO] === Request start === [2025-09-07 12:51:04][351272333434587][1 ms][DEBUG] START check_scloud [2025-09-07 12:51:04][351272333434587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:51:04][351272333434587][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 18420 4969 24867620 158668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:51:04][351272333434587][278 ms][DEBUG] targetPkg: running [2025-09-07 12:51:04][351272333434587][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-07 12:51:04][351272333434587][278 ms][DEBUG] START check_boot_completed [2025-09-07 12:51:04][351272333434587][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:51:04][351272333434587][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:51:04][351272333434587][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:51:04][351272333434587][372 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:51:04][351272333434587][372 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 12:51:04][351272333434587][372 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:51:04][351272333434587][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333434587\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6661\"}'\'' -e'"" [2025-09-07 12:51:04][351272333434587][372 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:51:04][351272333434587][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333434587\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6661\"}'\'' -e'"" [2025-09-07 12:51:09][351272333434587][5199 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bac369e1-850c-4107-bc4d-7888ef327cea","id":"QR_bac369e1-850c-4107-bc4d-7888ef327cea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:51:09][351272333434587][5355 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-07 12:51:09][351272333434587][5355 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-07 12:51:09][351272333434587][5355 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:51:11][351272333434587][0 ms][INFO] === Request start === [2025-09-07 12:51:11][351272333434587][1 ms][DEBUG] START check_scloud [2025-09-07 12:51:11][351272333434587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:51:12][351272333434587][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 18420 4969 25012140 170592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:51:12][351272333434587][307 ms][DEBUG] targetPkg: running [2025-09-07 12:51:12][351272333434587][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 12:51:12][351272333434587][307 ms][DEBUG] START check_boot_completed [2025-09-07 12:51:12][351272333434587][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:51:12][351272333434587][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:51:12][351272333434587][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:51:12][351272333434587][401 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 12:51:12][351272333434587][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 12:51:12][351272333434587][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:51:12][351272333434587][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333434587\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5284\"}'\'' -e'"" [2025-09-07 12:51:12][351272333434587][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:51:12][351272333434587][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333434587\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5284\"}'\'' -e'"" [2025-09-07 12:51:17][351272333434587][5790 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44b2cfcf-70b8-40d7-a4e1-8468d481c4d7","id":"QR_44b2cfcf-70b8-40d7-a4e1-8468d481c4d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:51:17][351272333434587][5947 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-07 12:51:17][351272333434587][5947 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-07 12:51:17][351272333434587][5947 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:54:03][352469858692123][1 ms][INFO] === Request start === [2025-09-07 12:54:03][352469858692123][1 ms][DEBUG] START check_scloud [2025-09-07 12:54:03][352469858692123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:54:04][352469858692123][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 18420 4969 25146348 181032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:54:04][352469858692123][301 ms][DEBUG] targetPkg: running [2025-09-07 12:54:04][352469858692123][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 12:54:04][352469858692123][301 ms][DEBUG] START check_boot_completed [2025-09-07 12:54:04][352469858692123][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:54:04][352469858692123][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:54:04][352469858692123][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:54:04][352469858692123][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:54:04][352469858692123][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:54:04][352469858692123][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:54:04][352469858692123][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2574\nsuccessfulTxPacketsPerSecond: 0.5015478230831573\nretriedTxPackets: 418\nretriedTxPacketsPerSecond: 0.11293129791276389\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2523\nsuccessfulRxPacketsPerSecond: 0.46501122669961603\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:54:04][352469858692123][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:54:05][352469858692123][1878 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.170/310.170/310.170/0.000 ms\n [2025-09-07 12:54:05][352469858692123][1879 ms][DEBUG] check_internet: online [2025-09-07 12:54:05][352469858692123][1879 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:54:05][352469858692123][1879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858692123\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8633\"}'\'' -e'"" [2025-09-07 12:54:05][352469858692123][1879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:54:05][352469858692123][1879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858692123\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8633\"}'\'' -e'"" [2025-09-07 12:54:09][352469858692123][5924 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c4cdf59-0a5f-4dbd-8ac8-6a24f13c9762","id":"QR_2c4cdf59-0a5f-4dbd-8ac8-6a24f13c9762","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:54:09][352469858692123][6080 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-09-07 12:54:09][352469858692123][6080 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-07 12:54:09][352469858692123][6080 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:54:12][352469858692123][0 ms][INFO] === Request start === [2025-09-07 12:54:12][352469858692123][1 ms][DEBUG] START check_scloud [2025-09-07 12:54:12][352469858692123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:54:12][352469858692123][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18420 4969 25283756 191728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:54:12][352469858692123][305 ms][DEBUG] targetPkg: running [2025-09-07 12:54:12][352469858692123][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 12:54:12][352469858692123][305 ms][DEBUG] START check_boot_completed [2025-09-07 12:54:12][352469858692123][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:54:12][352469858692123][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:54:12][352469858692123][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:54:12][352469858692123][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:54:12][352469858692123][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:54:12][352469858692123][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:54:12][352469858692123][492 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2574\nsuccessfulTxPacketsPerSecond: 0.5015478230831573\nretriedTxPackets: 418\nretriedTxPacketsPerSecond: 0.11293129791276389\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2523\nsuccessfulRxPacketsPerSecond: 0.46501122669961603\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:54:12][352469858692123][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:54:13][352469858692123][852 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.519/257.519/257.519/0.000 ms\n [2025-09-07 12:54:13][352469858692123][852 ms][DEBUG] check_internet: online [2025-09-07 12:54:13][352469858692123][852 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:54:13][352469858692123][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858692123\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6425\"}'\'' -e'"" [2025-09-07 12:54:13][352469858692123][852 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:54:13][352469858692123][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858692123\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6425\"}'\'' -e'"" [2025-09-07 12:54:17][352469858692123][5101 ms][DEBUG] proc_open done in 4248 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 12:54:17][352469858692123][5101 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-07 12:54:17][352469858692123][5101 ms][WARN] Detected error: Process with pid 18420 either refused to load frida-agent, or terminated during injectionProcess with pid 18420 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 12:54:17][352469858692123][5101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 12:54:17][352469858692123][5367 ms][DEBUG] SU: done in 266 ms; outsystem 5392 4969 12795780 201920 ep_poll 0 S system_server\n [2025-09-07 12:54:17][352469858692123][5367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 12:54:18][352469858692123][5522 ms][DEBUG] SU: done in 155 ms; out [2025-09-07 12:54:18][352469858692123][5523 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 12:54:18][352469858692123][5523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 12:54:18][352469858692123][5663 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 12:54:18][352469858692123][5663 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 12:54:18][352469858692123][5882 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 12:54:20][352469858692123][7897 ms][DEBUG] START check_boot_completed [2025-09-07 12:54:20][352469858692123][7897 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:54:20][352469858692123][7944 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:54:20][352469858692123][7944 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:54:20][352469858692123][8006 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 12:54:20][352469858692123][8006 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 12:54:23][352469858692123][11021 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 12:54:23][352469858692123][11021 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469858692123\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6425\"}'\'' -e'"" [2025-09-07 12:54:28][352469858692123][16129 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_147eff8a-1602-469b-931f-e062f899f9dd","id":"QR_147eff8a-1602-469b-931f-e062f899f9dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:54:28][352469858692123][16285 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-07 12:54:28][352469858692123][16285 ms][DEBUG] END runCmdUntilRes#2 in 5265 ms [2025-09-07 12:54:28][352469858692123][16286 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:55:03][351272335000410][0 ms][INFO] === Request start === [2025-09-07 12:55:03][351272335000410][1 ms][DEBUG] START check_scloud [2025-09-07 12:55:03][351272335000410][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:55:03][351272335000410][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21422 4969 23839512 127872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:55:03][351272335000410][311 ms][DEBUG] targetPkg: running [2025-09-07 12:55:03][351272335000410][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 12:55:03][351272335000410][311 ms][DEBUG] START check_boot_completed [2025-09-07 12:55:03][351272335000410][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:55:03][351272335000410][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:55:03][351272335000410][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:55:03][351272335000410][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:55:03][351272335000410][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:55:03][351272335000410][389 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:55:03][351272335000410][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335000410\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4621\"}'\'' -e'"" [2025-09-07 12:55:03][351272335000410][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:55:03][351272335000410][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335000410\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4621\"}'\'' -e'"" [2025-09-07 12:55:07][351272335000410][3779 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b968958a-3eda-476a-a117-222d417afc1f","id":"QR_b968958a-3eda-476a-a117-222d417afc1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:55:07][351272335000410][3935 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-07 12:55:07][351272335000410][3935 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-07 12:55:07][351272335000410][3935 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:55:09][351272335000410][0 ms][INFO] === Request start === [2025-09-07 12:55:09][351272335000410][1 ms][DEBUG] START check_scloud [2025-09-07 12:55:09][351272335000410][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:55:09][351272335000410][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 21422 4969 23998432 139584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:55:09][351272335000410][264 ms][DEBUG] targetPkg: running [2025-09-07 12:55:09][351272335000410][264 ms][DEBUG] END check_scloud in 264 ms [2025-09-07 12:55:09][351272335000410][264 ms][DEBUG] START check_boot_completed [2025-09-07 12:55:09][351272335000410][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:55:09][351272335000410][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 12:55:09][351272335000410][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:55:09][351272335000410][373 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 12:55:09][351272335000410][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 12:55:09][351272335000410][374 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:55:09][351272335000410][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335000410\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1569\"}'\'' -e'"" [2025-09-07 12:55:09][351272335000410][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:55:09][351272335000410][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272335000410\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1569\"}'\'' -e'"" [2025-09-07 12:55:14][351272335000410][5075 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_995eeda8-a95c-4626-86a9-b14858533e40","id":"QR_995eeda8-a95c-4626-86a9-b14858533e40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:55:14][351272335000410][5231 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-07 12:55:14][351272335000410][5231 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-07 12:55:14][351272335000410][5231 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:58:03][359118661528544][1 ms][INFO] === Request start === [2025-09-07 12:58:03][359118661528544][1 ms][DEBUG] START check_scloud [2025-09-07 12:58:03][359118661528544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:58:04][359118661528544][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 21422 4969 24127592 151236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:58:04][359118661528544][300 ms][DEBUG] targetPkg: running [2025-09-07 12:58:04][359118661528544][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 12:58:04][359118661528544][300 ms][DEBUG] START check_boot_completed [2025-09-07 12:58:04][359118661528544][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:58:04][359118661528544][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 12:58:04][359118661528544][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:58:04][359118661528544][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:58:04][359118661528544][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 12:58:04][359118661528544][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:58:04][359118661528544][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2574\nsuccessfulTxPacketsPerSecond: 0.5015478230831573\nretriedTxPackets: 418\nretriedTxPacketsPerSecond: 0.11293129791276389\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2523\nsuccessfulRxPacketsPerSecond: 0.46501122669961603\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:58:04][359118661528544][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:58:04][359118661528544][862 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.841/264.841/264.841/0.000 ms\n [2025-09-07 12:58:04][359118661528544][863 ms][DEBUG] check_internet: online [2025-09-07 12:58:04][359118661528544][863 ms][DEBUG] rawBody.length=1150 [2025-09-07 12:58:04][359118661528544][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661528544\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3146\"}'\'' -e'"" [2025-09-07 12:58:04][359118661528544][863 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:58:04][359118661528544][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661528544\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3146\"}'\'' -e'"" [2025-09-07 12:58:09][359118661528544][5517 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9dc2ab4-16c5-4944-ad59-6fcf33183018","id":"QR_d9dc2ab4-16c5-4944-ad59-6fcf33183018","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:58:09][359118661528544][5674 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 12:58:09][359118661528544][5674 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 12:58:09][359118661528544][5674 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 12:58:11][359118661528544][0 ms][INFO] === Request start === [2025-09-07 12:58:11][359118661528544][1 ms][DEBUG] START check_scloud [2025-09-07 12:58:11][359118661528544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 12:58:12][359118661528544][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21422 4969 24307240 161820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 12:58:12][359118661528544][311 ms][DEBUG] targetPkg: running [2025-09-07 12:58:12][359118661528544][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 12:58:12][359118661528544][311 ms][DEBUG] START check_boot_completed [2025-09-07 12:58:12][359118661528544][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 12:58:12][359118661528544][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 12:58:12][359118661528544][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 12:58:12][359118661528544][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 12:58:12][359118661528544][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 12:58:12][359118661528544][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 12:58:12][359118661528544][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2731\nsuccessfulTxPacketsPerSecond: 0.5215530987562453\nretriedTxPackets: 458\nretriedTxPacketsPerSecond: 0.13287977038375678\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2663\nsuccessfulRxPacketsPerSecond: 0.4650791963431487\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 12:58:12][359118661528544][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 12:58:12][359118661528544][920 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.314/292.314/292.314/0.000 ms\n [2025-09-07 12:58:12][359118661528544][920 ms][DEBUG] check_internet: online [2025-09-07 12:58:12][359118661528544][920 ms][DEBUG] rawBody.length=1160 [2025-09-07 12:58:12][359118661528544][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661528544\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3723\"}'\'' -e'"" [2025-09-07 12:58:12][359118661528544][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 12:58:12][359118661528544][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661528544\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3723\"}'\'' -e'"" [2025-09-07 12:58:17][359118661528544][5762 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_966a2c0c-c2d5-4647-a6a2-853866faaf3c","id":"QR_966a2c0c-c2d5-4647-a6a2-853866faaf3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 12:58:17][359118661528544][5918 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-07 12:58:17][359118661528544][5918 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-07 12:58:17][359118661528544][5919 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:00:04][352397451589729][1 ms][INFO] === Request start === [2025-09-07 13:00:04][352397451589729][1 ms][DEBUG] START check_scloud [2025-09-07 13:00:04][352397451589729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:00:04][352397451589729][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 21422 4969 24447656 172836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:00:04][352397451589729][241 ms][DEBUG] targetPkg: running [2025-09-07 13:00:04][352397451589729][241 ms][DEBUG] END check_scloud in 240 ms [2025-09-07 13:00:04][352397451589729][241 ms][DEBUG] START check_boot_completed [2025-09-07 13:00:04][352397451589729][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:00:04][352397451589729][272 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:00:04][352397451589729][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:00:04][352397451589729][319 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:00:04][352397451589729][319 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:00:04][352397451589729][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:00:04][352397451589729][428 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2731\nsuccessfulTxPacketsPerSecond: 0.5215530987562453\nretriedTxPackets: 458\nretriedTxPacketsPerSecond: 0.13287977038375678\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2663\nsuccessfulRxPacketsPerSecond: 0.4650791963431487\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:00:04][352397451589729][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:00:06][352397451589729][1850 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.067/305.067/305.067/0.000 ms\n [2025-09-07 13:00:06][352397451589729][1850 ms][DEBUG] check_internet: online [2025-09-07 13:00:06][352397451589729][1850 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:00:06][352397451589729][1850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451589729\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3320\"}'\'' -e'"" [2025-09-07 13:00:06][352397451589729][1850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:00:06][352397451589729][1850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451589729\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3320\"}'\'' -e'"" [2025-09-07 13:00:09][352397451589729][5411 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_523fd2d1-89b8-49d6-a42d-dc3832622054","id":"QR_523fd2d1-89b8-49d6-a42d-dc3832622054","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:00:09][352397451589729][5568 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=3343 [2025-09-07 13:00:09][352397451589729][5568 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-09-07 13:00:09][352397451589729][5568 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:00:12][352397451589729][0 ms][INFO] === Request start === [2025-09-07 13:00:12][352397451589729][1 ms][DEBUG] START check_scloud [2025-09-07 13:00:12][352397451589729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:00:12][352397451589729][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21422 4969 24577968 184572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:00:12][352397451589729][311 ms][DEBUG] targetPkg: running [2025-09-07 13:00:12][352397451589729][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 13:00:12][352397451589729][311 ms][DEBUG] START check_boot_completed [2025-09-07 13:00:12][352397451589729][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:00:12][352397451589729][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:00:12][352397451589729][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:00:12][352397451589729][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:00:12][352397451589729][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:00:12][352397451589729][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:00:12][352397451589729][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2731\nsuccessfulTxPacketsPerSecond: 0.5215530987562453\nretriedTxPackets: 458\nretriedTxPacketsPerSecond: 0.13287977038375678\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2663\nsuccessfulRxPacketsPerSecond: 0.4650791963431487\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:00:12][352397451589729][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:00:12][352397451589729][873 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.523/229.523/229.523/0.000 ms\n [2025-09-07 13:00:12][352397451589729][873 ms][DEBUG] check_internet: online [2025-09-07 13:00:12][352397451589729][873 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:00:12][352397451589729][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451589729\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3580\"}'\'' -e'"" [2025-09-07 13:00:12][352397451589729][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:00:12][352397451589729][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451589729\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3580\"}'\'' -e'"" [2025-09-07 13:00:18][352397451589729][6231 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adb2b8bb-8c00-4df8-a4d0-751084781bdc","id":"QR_adb2b8bb-8c00-4df8-a4d0-751084781bdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:00:18][352397451589729][6387 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-07 13:00:18][352397451589729][6387 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 13:00:18][352397451589729][6387 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:02:03][357294615014790][1 ms][INFO] === Request start === [2025-09-07 13:02:03][357294615014790][1 ms][DEBUG] START check_scloud [2025-09-07 13:02:03][357294615014790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:02:04][357294615014790][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 21422 4969 24689648 195644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:02:04][357294615014790][300 ms][DEBUG] targetPkg: running [2025-09-07 13:02:04][357294615014790][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 13:02:04][357294615014790][300 ms][DEBUG] START check_boot_completed [2025-09-07 13:02:04][357294615014790][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:02:04][357294615014790][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:02:04][357294615014790][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:02:04][357294615014790][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 13:02:04][357294615014790][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 13:02:04][357294615014790][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:02:04][357294615014790][534 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2876\nsuccessfulTxPacketsPerSecond: 0.8499314193268543\nretriedTxPackets: 500\nretriedTxPacketsPerSecond: 0.24618703180501986\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2789\nsuccessfulRxPacketsPerSecond: 0.7385610954150597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:02:04][357294615014790][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:02:04][357294615014790][972 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=307 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 307.573/307.573/307.573/0.000 ms\n [2025-09-07 13:02:04][357294615014790][972 ms][DEBUG] check_internet: online [2025-09-07 13:02:04][357294615014790][972 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:02:04][357294615014790][972 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294615014790\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9293\"}'\'' -e'"" [2025-09-07 13:02:04][357294615014790][972 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:02:04][357294615014790][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294615014790\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9293\"}'\'' -e'"" [2025-09-07 13:02:09][357294615014790][5439 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d96984e6-e177-4c0d-8eda-f10ce8efa64d","id":"QR_d96984e6-e177-4c0d-8eda-f10ce8efa64d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:02:09][357294615014790][5595 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-09-07 13:02:09][357294615014790][5595 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-09-07 13:02:09][357294615014790][5595 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:02:11][357294615014790][0 ms][INFO] === Request start === [2025-09-07 13:02:11][357294615014790][1 ms][DEBUG] START check_scloud [2025-09-07 13:02:11][357294615014790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:02:12][357294615014790][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21422 4969 24862840 207432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:02:12][357294615014790][306 ms][DEBUG] targetPkg: running [2025-09-07 13:02:12][357294615014790][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 13:02:12][357294615014790][306 ms][DEBUG] START check_boot_completed [2025-09-07 13:02:12][357294615014790][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:02:12][357294615014790][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:02:12][357294615014790][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:02:12][357294615014790][433 ms][DEBUG] SU: done in 80 ms; out [2025-09-07 13:02:12][357294615014790][433 ms][DEBUG] END check_boot_completed in 127 ms [2025-09-07 13:02:12][357294615014790][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:02:12][357294615014790][571 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2876\nsuccessfulTxPacketsPerSecond: 0.8499314193268543\nretriedTxPackets: 500\nretriedTxPacketsPerSecond: 0.24618703180501986\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2789\nsuccessfulRxPacketsPerSecond: 0.7385610954150597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:02:12][357294615014790][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:02:12][357294615014790][930 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.580/226.580/226.580/0.000 ms\n [2025-09-07 13:02:12][357294615014790][931 ms][DEBUG] check_internet: online [2025-09-07 13:02:12][357294615014790][931 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:02:12][357294615014790][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294615014790\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1290\"}'\'' -e'"" [2025-09-07 13:02:12][357294615014790][931 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:02:12][357294615014790][931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294615014790\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1290\"}'\'' -e'"" [2025-09-07 13:02:17][357294615014790][5898 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e706bce2-84ff-42f8-b420-7725f30a55dd","id":"QR_e706bce2-84ff-42f8-b420-7725f30a55dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:02:17][357294615014790][6054 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-07 13:02:17][357294615014790][6054 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-07 13:02:17][357294615014790][6055 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:03:03][351978522275348][0 ms][INFO] === Request start === [2025-09-07 13:03:03][351978522275348][0 ms][DEBUG] START check_scloud [2025-09-07 13:03:03][351978522275348][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:03:03][351978522275348][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 21422 4969 25011000 218320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:03:03][351978522275348][269 ms][DEBUG] targetPkg: running [2025-09-07 13:03:03][351978522275348][269 ms][DEBUG] END check_scloud in 269 ms [2025-09-07 13:03:03][351978522275348][269 ms][DEBUG] START check_boot_completed [2025-09-07 13:03:03][351978522275348][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:03:03][351978522275348][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:03:03][351978522275348][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:03:03][351978522275348][378 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 13:03:03][351978522275348][378 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 13:03:03][351978522275348][378 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:03:03][351978522275348][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522275348\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4971\"}'\'' -e'"" [2025-09-07 13:03:03][351978522275348][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:03:03][351978522275348][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522275348\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4971\"}'\'' -e'"" [2025-09-07 13:03:06][351978522275348][3736 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_819ba5aa-b48d-4a84-9eb7-27c6c74e4e22","id":"QR_819ba5aa-b48d-4a84-9eb7-27c6c74e4e22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:03:07][351978522275348][3892 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-07 13:03:07][351978522275348][3892 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-07 13:03:07][351978522275348][3892 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:03:09][351978522275348][0 ms][INFO] === Request start === [2025-09-07 13:03:09][351978522275348][1 ms][DEBUG] START check_scloud [2025-09-07 13:03:09][351978522275348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:03:09][351978522275348][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 21422 4969 25159616 230064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:03:09][351978522275348][263 ms][DEBUG] targetPkg: running [2025-09-07 13:03:09][351978522275348][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-07 13:03:09][351978522275348][263 ms][DEBUG] START check_boot_completed [2025-09-07 13:03:09][351978522275348][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:03:09][351978522275348][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:03:09][351978522275348][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:03:09][351978522275348][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:03:09][351978522275348][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:03:09][351978522275348][357 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:03:09][351978522275348][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522275348\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1324\"}'\'' -e'"" [2025-09-07 13:03:09][351978522275348][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:03:09][351978522275348][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522275348\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1324\"}'\'' -e'"" [2025-09-07 13:03:14][351978522275348][4918 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fc8b4e6-0871-462b-a41e-d427cf575a1c","id":"QR_8fc8b4e6-0871-462b-a41e-d427cf575a1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:03:14][351978522275348][5074 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-07 13:03:14][351978522275348][5074 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-07 13:03:14][351978522275348][5074 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:04:04][354747957028143][1 ms][INFO] === Request start === [2025-09-07 13:04:04][354747957028143][1 ms][DEBUG] START check_scloud [2025-09-07 13:04:04][354747957028143][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:04:04][354747957028143][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21422 4969 25254916 241116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:04:04][354747957028143][306 ms][DEBUG] targetPkg: running [2025-09-07 13:04:04][354747957028143][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 13:04:04][354747957028143][306 ms][DEBUG] START check_boot_completed [2025-09-07 13:04:04][354747957028143][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:04:04][354747957028143][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:04:04][354747957028143][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:04:04][354747957028143][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:04:04][354747957028143][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:04:04][354747957028143][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:04:04][354747957028143][509 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2876\nsuccessfulTxPacketsPerSecond: 0.8499314193268543\nretriedTxPackets: 500\nretriedTxPacketsPerSecond: 0.24618703180501986\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2789\nsuccessfulRxPacketsPerSecond: 0.7385610954150597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:04:04][354747957028143][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:04:05][354747957028143][1884 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.614/300.614/300.614/0.000 ms\n [2025-09-07 13:04:05][354747957028143][1884 ms][DEBUG] check_internet: online [2025-09-07 13:04:05][354747957028143][1884 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:04:05][354747957028143][1884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957028143\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1300\"}'\'' -e'"" [2025-09-07 13:04:05][354747957028143][1884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:04:05][354747957028143][1884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957028143\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1300\"}'\'' -e'"" [2025-09-07 13:04:09][354747957028143][5570 ms][DEBUG] proc_open done in 3687 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 13:04:09][354747957028143][5571 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-09-07 13:04:09][354747957028143][5571 ms][WARN] Detected error: Process with pid 21422 either refused to load frida-agent, or terminated during injectionProcess with pid 21422 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 13:04:09][354747957028143][5571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 13:04:09][354747957028143][5867 ms][DEBUG] SU: done in 296 ms; outsystem 5392 4969 12797148 186100 ep_poll 0 S system_server\n [2025-09-07 13:04:09][354747957028143][5867 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 13:04:10][354747957028143][6023 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 13:04:10][354747957028143][6024 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 13:04:10][354747957028143][6024 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 13:04:10][354747957028143][6148 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 13:04:10][354747957028143][6148 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 13:04:10][354747957028143][6320 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 13:04:12][354747957028143][8335 ms][DEBUG] START check_boot_completed [2025-09-07 13:04:12][354747957028143][8335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:04:12][354747957028143][8382 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:04:12][354747957028143][8382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:04:12][354747957028143][8429 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:04:12][354747957028143][8429 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:04:15][354747957028143][11444 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 13:04:15][354747957028143][11444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957028143\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1300\"}'\'' -e'"" [2025-09-07 13:04:19][354747957028143][15146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89739d51-e386-4e87-843a-a80076abb941","id":"QR_89739d51-e386-4e87-843a-a80076abb941","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:04:19][354747957028143][15302 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-07 13:04:19][354747957028143][15302 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-09-07 13:04:19][354747957028143][15303 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:04:21][354747957028143][0 ms][INFO] === Request start === [2025-09-07 13:04:21][354747957028143][1 ms][DEBUG] START check_scloud [2025-09-07 13:04:21][354747957028143][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:04:21][354747957028143][230 ms][DEBUG] SU: done in 229 ms; outu0_a118 22999 4969 23883804 124636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:04:21][354747957028143][230 ms][DEBUG] targetPkg: running [2025-09-07 13:04:21][354747957028143][230 ms][DEBUG] END check_scloud in 229 ms [2025-09-07 13:04:21][354747957028143][230 ms][DEBUG] START check_boot_completed [2025-09-07 13:04:21][354747957028143][230 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:04:21][354747957028143][261 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:04:21][354747957028143][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:04:22][354747957028143][308 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:04:22][354747957028143][308 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:04:22][354747957028143][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:04:22][354747957028143][417 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2876\nsuccessfulTxPacketsPerSecond: 0.8499314193268543\nretriedTxPackets: 500\nretriedTxPacketsPerSecond: 0.24618703180501986\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2789\nsuccessfulRxPacketsPerSecond: 0.7385610954150597\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:04:22][354747957028143][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:04:22][354747957028143][808 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.570/293.570/293.570/0.000 ms\n [2025-09-07 13:04:22][354747957028143][808 ms][DEBUG] check_internet: online [2025-09-07 13:04:22][354747957028143][808 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:04:22][354747957028143][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957028143\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6770\"}'\'' -e'"" [2025-09-07 13:04:22][354747957028143][808 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:04:22][354747957028143][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957028143\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6770\"}'\'' -e'"" [2025-09-07 13:04:27][354747957028143][6041 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89adc6e3-14bc-4600-8921-feaffc4c54ae","id":"QR_89adc6e3-14bc-4600-8921-feaffc4c54ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:04:27][354747957028143][6197 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-07 13:04:27][354747957028143][6197 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-07 13:04:27][354747957028143][6198 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:09:03][353310804073126][1 ms][INFO] === Request start === [2025-09-07 13:09:03][353310804073126][1 ms][DEBUG] START check_scloud [2025-09-07 13:09:03][353310804073126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:09:03][353310804073126][322 ms][DEBUG] SU: done in 320 ms; outu0_a118 22999 4969 23968772 138748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:09:03][353310804073126][322 ms][DEBUG] targetPkg: running [2025-09-07 13:09:03][353310804073126][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 13:09:03][353310804073126][322 ms][DEBUG] START check_boot_completed [2025-09-07 13:09:03][353310804073126][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:09:03][353310804073126][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:09:03][353310804073126][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:09:03][353310804073126][418 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 13:09:03][353310804073126][418 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-07 13:09:03][353310804073126][418 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:09:03][353310804073126][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804073126\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9853\"}'\'' -e'"" [2025-09-07 13:09:03][353310804073126][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:09:03][353310804073126][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804073126\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9853\"}'\'' -e'"" [2025-09-07 13:09:08][353310804073126][4992 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec178823-46bc-4778-96e8-92d453bfd988","id":"QR_ec178823-46bc-4778-96e8-92d453bfd988","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:09:08][353310804073126][5148 ms][DEBUG] proc_open done in 4730 ms; code=255; res.len=3343 [2025-09-07 13:09:08][353310804073126][5148 ms][DEBUG] END runCmdUntilRes#1 in 4731 ms [2025-09-07 13:09:08][353310804073126][5148 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:09:10][353310804073126][0 ms][INFO] === Request start === [2025-09-07 13:09:10][353310804073126][1 ms][DEBUG] START check_scloud [2025-09-07 13:09:10][353310804073126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:09:11][353310804073126][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 22999 4969 24117388 150224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:09:11][353310804073126][303 ms][DEBUG] targetPkg: running [2025-09-07 13:09:11][353310804073126][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 13:09:11][353310804073126][303 ms][DEBUG] START check_boot_completed [2025-09-07 13:09:11][353310804073126][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:09:11][353310804073126][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:09:11][353310804073126][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:09:11][353310804073126][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 13:09:11][353310804073126][411 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 13:09:11][353310804073126][411 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:09:11][353310804073126][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804073126\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8186\"}'\'' -e'"" [2025-09-07 13:09:11][353310804073126][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:09:11][353310804073126][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804073126\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8186\"}'\'' -e'"" [2025-09-07 13:09:16][353310804073126][5441 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff365f95-37c8-4e3e-bb83-14fef38ca320","id":"QR_ff365f95-37c8-4e3e-bb83-14fef38ca320","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:09:16][353310804073126][5597 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 13:09:16][353310804073126][5597 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 13:09:16][353310804073126][5597 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:10:04][357962503643702][0 ms][INFO] === Request start === [2025-09-07 13:10:04][357962503643702][1 ms][DEBUG] START check_scloud [2025-09-07 13:10:04][357962503643702][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:10:04][357962503643702][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 22999 4969 24220940 160952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:10:04][357962503643702][252 ms][DEBUG] targetPkg: running [2025-09-07 13:10:04][357962503643702][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-07 13:10:04][357962503643702][253 ms][DEBUG] START check_boot_completed [2025-09-07 13:10:04][357962503643702][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:10:04][357962503643702][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:10:04][357962503643702][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:10:04][357962503643702][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:10:04][357962503643702][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:10:04][357962503643702][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:10:04][357962503643702][455 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3098\nsuccessfulTxPacketsPerSecond: 0.14939388765579648\nretriedTxPackets: 556\nretriedTxPacketsPerSecond: 0.028455978601104093\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2983\nsuccessfulRxPacketsPerSecond: 0.14939388765579648\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:10:04][357962503643702][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:10:05][357962503643702][1830 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.358/303.358/303.358/0.000 ms\n [2025-09-07 13:10:05][357962503643702][1830 ms][DEBUG] check_internet: online [2025-09-07 13:10:05][357962503643702][1830 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:10:05][357962503643702][1830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503643702\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2822\"}'\'' -e'"" [2025-09-07 13:10:05][357962503643702][1830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:10:05][357962503643702][1830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503643702\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2822\"}'\'' -e'"" [2025-09-07 13:10:10][357962503643702][6141 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f7787a2-e02a-4e5c-bf5f-f29cf69326ca","id":"QR_7f7787a2-e02a-4e5c-bf5f-f29cf69326ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:10:10][357962503643702][6297 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-09-07 13:10:10][357962503643702][6298 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-07 13:10:10][357962503643702][6298 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:10:12][357962503643702][0 ms][INFO] === Request start === [2025-09-07 13:10:12][357962503643702][1 ms][DEBUG] START check_scloud [2025-09-07 13:10:12][357962503643702][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:10:12][357962503643702][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 22999 4969 24350156 171696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:10:12][357962503643702][259 ms][DEBUG] targetPkg: running [2025-09-07 13:10:12][357962503643702][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-07 13:10:12][357962503643702][259 ms][DEBUG] START check_boot_completed [2025-09-07 13:10:12][357962503643702][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:10:13][357962503643702][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:10:13][357962503643702][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:10:13][357962503643702][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:10:13][357962503643702][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:10:13][357962503643702][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:10:13][357962503643702][462 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3098\nsuccessfulTxPacketsPerSecond: 0.14939388765579648\nretriedTxPackets: 556\nretriedTxPacketsPerSecond: 0.028455978601104093\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2983\nsuccessfulRxPacketsPerSecond: 0.14939388765579648\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:10:13][357962503643702][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:10:13][357962503643702][853 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.576/283.576/283.576/0.000 ms\n [2025-09-07 13:10:13][357962503643702][853 ms][DEBUG] check_internet: online [2025-09-07 13:10:13][357962503643702][853 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:10:13][357962503643702][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503643702\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3558\"}'\'' -e'"" [2025-09-07 13:10:13][357962503643702][853 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:10:13][357962503643702][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503643702\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3558\"}'\'' -e'"" [2025-09-07 13:10:18][357962503643702][5804 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aaceee2-4af1-4f1f-b975-ed218002507d","id":"QR_2aaceee2-4af1-4f1f-b975-ed218002507d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:10:18][357962503643702][5961 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-07 13:10:18][357962503643702][5961 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-09-07 13:10:18][357962503643702][5961 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:11:03][357291304038973][0 ms][INFO] === Request start === [2025-09-07 13:11:03][357291304038973][1 ms][DEBUG] START check_scloud [2025-09-07 13:11:03][357291304038973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:11:03][357291304038973][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22999 4969 24447500 183096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:11:03][357291304038973][314 ms][DEBUG] targetPkg: running [2025-09-07 13:11:03][357291304038973][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 13:11:03][357291304038973][314 ms][DEBUG] START check_boot_completed [2025-09-07 13:11:03][357291304038973][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:11:03][357291304038973][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:11:03][357291304038973][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:11:03][357291304038973][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 13:11:03][357291304038973][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 13:11:03][357291304038973][424 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:11:03][357291304038973][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357291304038973\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6072\"}'\'' -e'"" [2025-09-07 13:11:03][357291304038973][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:11:03][357291304038973][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357291304038973\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6072\"}'\'' -e'"" [2025-09-07 13:11:06][357291304038973][3766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54cad3a9-8029-4fbd-ae74-e60d5beed269","id":"QR_54cad3a9-8029-4fbd-ae74-e60d5beed269","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:11:07][357291304038973][3923 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-07 13:11:07][357291304038973][3923 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-07 13:11:07][357291304038973][3923 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:11:09][357291304038973][1 ms][INFO] === Request start === [2025-09-07 13:11:09][357291304038973][1 ms][DEBUG] START check_scloud [2025-09-07 13:11:09][357291304038973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:11:09][357291304038973][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 22999 4969 24573652 194012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:11:09][357291304038973][252 ms][DEBUG] targetPkg: running [2025-09-07 13:11:09][357291304038973][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-07 13:11:09][357291304038973][252 ms][DEBUG] START check_boot_completed [2025-09-07 13:11:09][357291304038973][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:11:09][357291304038973][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:11:09][357291304038973][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:11:09][357291304038973][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:11:09][357291304038973][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:11:09][357291304038973][346 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:11:09][357291304038973][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357291304038973\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9672\"}'\'' -e'"" [2025-09-07 13:11:09][357291304038973][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:11:09][357291304038973][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357291304038973\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9672\"}'\'' -e'"" [2025-09-07 13:11:14][357291304038973][5032 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e362bd8-193c-476b-8818-16b267e9d7c1","id":"QR_9e362bd8-193c-476b-8818-16b267e9d7c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:11:14][357291304038973][5188 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-07 13:11:14][357291304038973][5188 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-07 13:11:14][357291304038973][5188 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:17:04][353243885203942][1 ms][INFO] === Request start === [2025-09-07 13:17:04][353243885203942][1 ms][DEBUG] START check_scloud [2025-09-07 13:17:04][353243885203942][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:17:04][353243885203942][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 22999 4969 24697620 205700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:17:04][353243885203942][284 ms][DEBUG] targetPkg: running [2025-09-07 13:17:04][353243885203942][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 13:17:04][353243885203942][284 ms][DEBUG] START check_boot_completed [2025-09-07 13:17:04][353243885203942][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:17:04][353243885203942][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:17:04][353243885203942][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:17:04][353243885203942][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:17:04][353243885203942][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:17:04][353243885203942][362 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:17:04][353243885203942][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885203942\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2313\"}'\'' -e'"" [2025-09-07 13:17:04][353243885203942][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:17:04][353243885203942][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885203942\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2313\"}'\'' -e'"" [2025-09-07 13:17:08][353243885203942][4830 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3cc12b9-ef08-4a2f-a6b8-5065840c5f65","id":"QR_a3cc12b9-ef08-4a2f-a6b8-5065840c5f65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:17:09][353243885203942][4986 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-07 13:17:09][353243885203942][4986 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-07 13:17:09][353243885203942][4986 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:17:11][353243885203942][1 ms][INFO] === Request start === [2025-09-07 13:17:11][353243885203942][1 ms][DEBUG] START check_scloud [2025-09-07 13:17:11][353243885203942][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:17:11][353243885203942][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 22999 4969 24868764 216448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:17:11][353243885203942][297 ms][DEBUG] targetPkg: running [2025-09-07 13:17:11][353243885203942][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 13:17:11][353243885203942][297 ms][DEBUG] START check_boot_completed [2025-09-07 13:17:11][353243885203942][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:17:11][353243885203942][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:17:11][353243885203942][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:17:11][353243885203942][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:17:11][353243885203942][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:17:11][353243885203942][390 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:17:11][353243885203942][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885203942\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2064\"}'\'' -e'"" [2025-09-07 13:17:11][353243885203942][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:17:11][353243885203942][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885203942\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2064\"}'\'' -e'"" [2025-09-07 13:17:16][353243885203942][5342 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64762f7b-f8ae-4a50-aae6-69a49ca305f4","id":"QR_64762f7b-f8ae-4a50-aae6-69a49ca305f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:17:16][353243885203942][5499 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-07 13:17:16][353243885203942][5499 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-07 13:17:16][353243885203942][5499 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:19:03][357040732060772][0 ms][INFO] === Request start === [2025-09-07 13:19:03][357040732060772][1 ms][DEBUG] START check_scloud [2025-09-07 13:19:03][357040732060772][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:19:03][357040732060772][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 22999 4969 24972380 228520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:19:03][357040732060772][293 ms][DEBUG] targetPkg: running [2025-09-07 13:19:03][357040732060772][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 13:19:03][357040732060772][294 ms][DEBUG] START check_boot_completed [2025-09-07 13:19:03][357040732060772][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:19:03][357040732060772][340 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:19:03][357040732060772][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:19:03][357040732060772][434 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 13:19:03][357040732060772][434 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 13:19:03][357040732060772][434 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:19:03][357040732060772][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732060772\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3823\"}'\'' -e'"" [2025-09-07 13:19:03][357040732060772][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:19:03][357040732060772][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732060772\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3823\"}'\'' -e'"" [2025-09-07 13:19:08][357040732060772][4917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_657e137c-7a9d-42c9-977c-48fb98f9efec","id":"QR_657e137c-7a9d-42c9-977c-48fb98f9efec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:19:08][357040732060772][5073 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-07 13:19:08][357040732060772][5073 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-07 13:19:08][357040732060772][5073 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:19:10][357040732060772][0 ms][INFO] === Request start === [2025-09-07 13:19:10][357040732060772][1 ms][DEBUG] START check_scloud [2025-09-07 13:19:10][357040732060772][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:19:11][357040732060772][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 22999 4969 25147240 239496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:19:11][357040732060772][307 ms][DEBUG] targetPkg: running [2025-09-07 13:19:11][357040732060772][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 13:19:11][357040732060772][307 ms][DEBUG] START check_boot_completed [2025-09-07 13:19:11][357040732060772][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:19:11][357040732060772][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:19:11][357040732060772][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:19:11][357040732060772][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:19:11][357040732060772][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:19:11][357040732060772][385 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:19:11][357040732060772][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732060772\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9256\"}'\'' -e'"" [2025-09-07 13:19:11][357040732060772][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:19:11][357040732060772][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732060772\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9256\"}'\'' -e'"" [2025-09-07 13:19:14][357040732060772][4196 ms][DEBUG] proc_open done in 3811 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 13:19:14][357040732060772][4197 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-09-07 13:19:14][357040732060772][4197 ms][WARN] Detected error: Process with pid 22999 either refused to load frida-agent, or terminated during injectionProcess with pid 22999 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 13:19:14][357040732060772][4197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 13:19:15][357040732060772][4462 ms][DEBUG] SU: done in 265 ms; outsystem 5392 4969 12814584 197424 ep_poll 0 S system_server\n [2025-09-07 13:19:15][357040732060772][4462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 13:19:15][357040732060772][4603 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 13:19:15][357040732060772][4603 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 13:19:15][357040732060772][4603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 13:19:15][357040732060772][4743 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 13:19:15][357040732060772][4743 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 13:19:15][357040732060772][4946 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 13:19:17][357040732060772][6961 ms][DEBUG] START check_boot_completed [2025-09-07 13:19:17][357040732060772][6961 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:19:17][357040732060772][7008 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:19:17][357040732060772][7008 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:19:17][357040732060772][7055 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:19:17][357040732060772][7055 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:19:20][357040732060772][10070 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 13:19:20][357040732060772][10070 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040732060772\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9256\"}'\'' -e'"" [2025-09-07 13:19:25][357040732060772][14928 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4612800c-e38f-4b0d-8209-7ec5286d7af0","id":"QR_4612800c-e38f-4b0d-8209-7ec5286d7af0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:19:25][357040732060772][15084 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-07 13:19:25][357040732060772][15084 ms][DEBUG] END runCmdUntilRes#2 in 5015 ms [2025-09-07 13:19:25][357040732060772][15084 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:22:03][350013880984777][1 ms][INFO] === Request start === [2025-09-07 13:22:03][350013880984777][1 ms][DEBUG] START check_scloud [2025-09-07 13:22:03][350013880984777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:22:03][350013880984777][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25380 4969 23780072 127336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:22:03][350013880984777][308 ms][DEBUG] targetPkg: running [2025-09-07 13:22:03][350013880984777][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 13:22:03][350013880984777][308 ms][DEBUG] START check_boot_completed [2025-09-07 13:22:03][350013880984777][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:22:03][350013880984777][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:22:03][350013880984777][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:22:03][350013880984777][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 13:22:03][350013880984777][388 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 13:22:03][350013880984777][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:22:04][350013880984777][496 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3483\nsuccessfulTxPacketsPerSecond: 0.46517655111459627\nretriedTxPackets: 658\nretriedTxPacketsPerSecond: 0.13290758603274178\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3324\nsuccessfulRxPacketsPerSecond: 0.40536813739986244\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:22:04][350013880984777][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:22:05][350013880984777][2042 ms][DEBUG] SU: done in 1546 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.722/304.722/304.722/0.000 ms\n [2025-09-07 13:22:05][350013880984777][2042 ms][DEBUG] check_internet: online [2025-09-07 13:22:05][350013880984777][2042 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:22:05][350013880984777][2042 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880984777\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1754\"}'\'' -e'"" [2025-09-07 13:22:05][350013880984777][2042 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:22:05][350013880984777][2042 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880984777\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1754\"}'\'' -e'"" [2025-09-07 13:22:09][350013880984777][5994 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2129c843-3a3d-4617-a014-745c25112528","id":"QR_2129c843-3a3d-4617-a014-745c25112528","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:22:09][350013880984777][6150 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-07 13:22:09][350013880984777][6150 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-07 13:22:09][350013880984777][6150 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:22:12][350013880984777][0 ms][INFO] === Request start === [2025-09-07 13:22:12][350013880984777][1 ms][DEBUG] START check_scloud [2025-09-07 13:22:12][350013880984777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:22:12][350013880984777][266 ms][DEBUG] SU: done in 266 ms; outu0_a118 25380 4969 23912368 138280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:22:12][350013880984777][267 ms][DEBUG] targetPkg: running [2025-09-07 13:22:12][350013880984777][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-07 13:22:12][350013880984777][267 ms][DEBUG] START check_boot_completed [2025-09-07 13:22:12][350013880984777][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:22:12][350013880984777][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:22:12][350013880984777][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:22:12][350013880984777][407 ms][DEBUG] SU: done in 93 ms; out [2025-09-07 13:22:12][350013880984777][407 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 13:22:12][350013880984777][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:22:12][350013880984777][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3483\nsuccessfulTxPacketsPerSecond: 0.46517655111459627\nretriedTxPackets: 658\nretriedTxPacketsPerSecond: 0.13290758603274178\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3324\nsuccessfulRxPacketsPerSecond: 0.40536813739986244\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:22:12][350013880984777][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:22:13][350013880984777][971 ms][DEBUG] SU: done in 439 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.494/310.494/310.494/0.000 ms\n [2025-09-07 13:22:13][350013880984777][971 ms][DEBUG] check_internet: online [2025-09-07 13:22:13][350013880984777][971 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:22:13][350013880984777][972 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880984777\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3412\"}'\'' -e'"" [2025-09-07 13:22:13][350013880984777][972 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:22:13][350013880984777][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880984777\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3412\"}'\'' -e'"" [2025-09-07 13:22:18][350013880984777][6327 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9dee5f8f-d4a6-44ef-a792-d4bdf4f67980","id":"QR_9dee5f8f-d4a6-44ef-a792-d4bdf4f67980","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:22:18][350013880984777][6483 ms][DEBUG] proc_open done in 5512 ms; code=255; res.len=3343 [2025-09-07 13:22:18][350013880984777][6484 ms][DEBUG] END runCmdUntilRes#1 in 5512 ms [2025-09-07 13:22:18][350013880984777][6484 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:23:03][350683212608870][0 ms][INFO] === Request start === [2025-09-07 13:23:03][350683212608870][1 ms][DEBUG] START check_scloud [2025-09-07 13:23:03][350683212608870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:23:03][350683212608870][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 25380 4969 24057648 149964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:23:03][350683212608870][300 ms][DEBUG] targetPkg: running [2025-09-07 13:23:03][350683212608870][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 13:23:03][350683212608870][300 ms][DEBUG] START check_boot_completed [2025-09-07 13:23:03][350683212608870][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:23:03][350683212608870][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:23:03][350683212608870][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:23:03][350683212608870][410 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 13:23:03][350683212608870][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 13:23:03][350683212608870][410 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:23:03][350683212608870][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683212608870\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9003\"}'\'' -e'"" [2025-09-07 13:23:03][350683212608870][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:23:03][350683212608870][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683212608870\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9003\"}'\'' -e'"" [2025-09-07 13:23:06][350683212608870][3706 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_697c3a44-4557-4a75-8f34-af1c67e9691e","id":"QR_697c3a44-4557-4a75-8f34-af1c67e9691e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:23:06][350683212608870][3862 ms][DEBUG] proc_open done in 3451 ms; code=255; res.len=3343 [2025-09-07 13:23:06][350683212608870][3862 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-07 13:23:06][350683212608870][3862 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:23:09][350683212608870][0 ms][INFO] === Request start === [2025-09-07 13:23:09][350683212608870][1 ms][DEBUG] START check_scloud [2025-09-07 13:23:09][350683212608870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:23:09][350683212608870][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 25380 4969 24202360 160864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:23:09][350683212608870][298 ms][DEBUG] targetPkg: running [2025-09-07 13:23:09][350683212608870][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 13:23:09][350683212608870][298 ms][DEBUG] START check_boot_completed [2025-09-07 13:23:09][350683212608870][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:23:09][350683212608870][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:23:09][350683212608870][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:23:09][350683212608870][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:23:09][350683212608870][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:23:09][350683212608870][376 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:23:09][350683212608870][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683212608870\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-09-07 13:23:09][350683212608870][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:23:09][350683212608870][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683212608870\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-09-07 13:23:14][350683212608870][4984 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a0a14e6-6903-450e-b999-e0c88f0db837","id":"QR_0a0a14e6-6903-450e-b999-e0c88f0db837","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:23:14][350683212608870][5140 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-07 13:23:14][350683212608870][5141 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-07 13:23:14][350683212608870][5141 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:29:05][359253130719547][1 ms][INFO] === Request start === [2025-09-07 13:29:05][359253130719547][1 ms][DEBUG] START check_scloud [2025-09-07 13:29:05][359253130719547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:29:05][359253130719547][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 25380 4969 24317944 171956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:29:05][359253130719547][307 ms][DEBUG] targetPkg: running [2025-09-07 13:29:05][359253130719547][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 13:29:05][359253130719547][307 ms][DEBUG] START check_boot_completed [2025-09-07 13:29:05][359253130719547][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:29:05][359253130719547][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:29:05][359253130719547][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:29:05][359253130719547][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:29:05][359253130719547][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:29:05][359253130719547][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:29:05][359253130719547][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359253130719547\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR50CG5CJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2964\"}'\'' -e'"" [2025-09-07 13:29:05][359253130719547][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:29:05][359253130719547][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359253130719547\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR50CG5CJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2964\"}'\'' -e'"" [2025-09-07 13:29:10][359253130719547][4993 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23630e03-30b8-4d6f-b9d6-c17e4f03e4f1","id":"QR_23630e03-30b8-4d6f-b9d6-c17e4f03e4f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:29:10][359253130719547][5149 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-07 13:29:10][359253130719547][5149 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-07 13:29:10][359253130719547][5150 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:32:03][352682503260225][1 ms][INFO] === Request start === [2025-09-07 13:32:03][352682503260225][1 ms][DEBUG] START check_scloud [2025-09-07 13:32:03][352682503260225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:32:03][352682503260225][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 25380 4969 24441948 183968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:32:03][352682503260225][284 ms][DEBUG] targetPkg: running [2025-09-07 13:32:03][352682503260225][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 13:32:03][352682503260225][284 ms][DEBUG] START check_boot_completed [2025-09-07 13:32:03][352682503260225][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:32:03][352682503260225][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:32:03][352682503260225][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:32:03][352682503260225][378 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 13:32:03][352682503260225][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:32:03][352682503260225][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:32:04][352682503260225][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3793\nsuccessfulTxPacketsPerSecond: 0.1715972276205256\nretriedTxPackets: 732\nretriedTxPacketsPerSecond: 0.03431944553361497\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3602\nsuccessfulRxPacketsPerSecond: 0.15443750488938002\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:32:04][352682503260225][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:32:05][352682503260225][1971 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=403 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 403.730/403.730/403.730/0.000 ms\n [2025-09-07 13:32:05][352682503260225][1971 ms][DEBUG] check_internet: online [2025-09-07 13:32:05][352682503260225][1971 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:32:05][352682503260225][1971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682503260225\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1579\"}'\'' -e'"" [2025-09-07 13:32:05][352682503260225][1972 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:32:05][352682503260225][1972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682503260225\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1579\"}'\'' -e'"" [2025-09-07 13:32:09][352682503260225][6048 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ad5f0d3-24ab-4fd7-86ae-8dab544222ed","id":"QR_0ad5f0d3-24ab-4fd7-86ae-8dab544222ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:32:09][352682503260225][6204 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-07 13:32:09][352682503260225][6204 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-07 13:32:09][352682503260225][6205 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:32:12][352682503260225][0 ms][INFO] === Request start === [2025-09-07 13:32:12][352682503260225][1 ms][DEBUG] START check_scloud [2025-09-07 13:32:12][352682503260225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:32:12][352682503260225][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 25380 4969 24623460 194820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:32:12][352682503260225][297 ms][DEBUG] targetPkg: running [2025-09-07 13:32:12][352682503260225][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 13:32:12][352682503260225][298 ms][DEBUG] START check_boot_completed [2025-09-07 13:32:12][352682503260225][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:32:12][352682503260225][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:32:12][352682503260225][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:32:12][352682503260225][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:32:12][352682503260225][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:32:12][352682503260225][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:32:12][352682503260225][547 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3793\nsuccessfulTxPacketsPerSecond: 0.1715972276205256\nretriedTxPackets: 732\nretriedTxPacketsPerSecond: 0.03431944553361497\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3602\nsuccessfulRxPacketsPerSecond: 0.15443750488938002\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:32:12][352682503260225][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:32:13][352682503260225][984 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.214/336.214/336.214/0.000 ms\n [2025-09-07 13:32:13][352682503260225][984 ms][DEBUG] check_internet: online [2025-09-07 13:32:13][352682503260225][985 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:32:13][352682503260225][985 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682503260225\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3268\"}'\'' -e'"" [2025-09-07 13:32:13][352682503260225][985 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:32:13][352682503260225][985 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682503260225\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3268\"}'\'' -e'"" [2025-09-07 13:32:18][352682503260225][6139 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17bc9df5-fdb8-4d0f-9a68-20a02a844f82","id":"QR_17bc9df5-fdb8-4d0f-9a68-20a02a844f82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:32:18][352682503260225][6296 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 13:32:18][352682503260225][6296 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 13:32:18][352682503260225][6296 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:36:05][350545461221814][1 ms][INFO] === Request start === [2025-09-07 13:36:05][350545461221814][1 ms][DEBUG] START check_scloud [2025-09-07 13:36:05][350545461221814][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:36:05][350545461221814][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25380 4969 24746916 205776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:36:05][350545461221814][308 ms][DEBUG] targetPkg: running [2025-09-07 13:36:05][350545461221814][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 13:36:05][350545461221814][308 ms][DEBUG] START check_boot_completed [2025-09-07 13:36:05][350545461221814][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:36:05][350545461221814][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:36:05][350545461221814][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:36:05][350545461221814][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:36:05][350545461221814][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:36:05][350545461221814][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:36:05][350545461221814][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3889\nsuccessfulTxPacketsPerSecond: 0.385138469315296\nretriedTxPackets: 755\nretriedTxPacketsPerSecond: 0.09227275827345634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3694\nsuccessfulRxPacketsPerSecond: 0.36909103309382535\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:36:05][350545461221814][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:36:06][350545461221814][933 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.828/316.828/316.828/0.000 ms\n [2025-09-07 13:36:06][350545461221814][933 ms][DEBUG] check_internet: online [2025-09-07 13:36:06][350545461221814][933 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:36:06][350545461221814][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461221814\",\"model\":\"SM-T733\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T7080M3N\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1254\"}'\'' -e'"" [2025-09-07 13:36:06][350545461221814][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:36:06][350545461221814][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461221814\",\"model\":\"SM-T733\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T7080M3N\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1254\"}'\'' -e'"" [2025-09-07 13:36:10][350545461221814][5463 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3c4c28d-bdd1-4a82-badf-fe7883c9204c","id":"QR_a3c4c28d-bdd1-4a82-badf-fe7883c9204c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:36:10][350545461221814][5619 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-07 13:36:10][350545461221814][5619 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-07 13:36:10][350545461221814][5619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:37:03][356168211653204][0 ms][INFO] === Request start === [2025-09-07 13:37:03][356168211653204][1 ms][DEBUG] START check_scloud [2025-09-07 13:37:03][356168211653204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:37:03][356168211653204][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 25380 4969 24883336 218000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:37:03][356168211653204][268 ms][DEBUG] targetPkg: running [2025-09-07 13:37:03][356168211653204][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 13:37:03][356168211653204][268 ms][DEBUG] START check_boot_completed [2025-09-07 13:37:03][356168211653204][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:37:03][356168211653204][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:37:03][356168211653204][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:37:03][356168211653204][364 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 13:37:03][356168211653204][364 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-07 13:37:03][356168211653204][364 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:37:03][356168211653204][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168211653204\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7397\"}'\'' -e'"" [2025-09-07 13:37:03][356168211653204][364 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:37:03][356168211653204][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168211653204\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7397\"}'\'' -e'"" [2025-09-07 13:37:07][356168211653204][3751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2c348d0-facc-4acf-90f2-de2ac01ba03f","id":"QR_b2c348d0-facc-4acf-90f2-de2ac01ba03f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:37:07][356168211653204][3907 ms][DEBUG] proc_open done in 3543 ms; code=255; res.len=3343 [2025-09-07 13:37:07][356168211653204][3907 ms][DEBUG] END runCmdUntilRes#1 in 3543 ms [2025-09-07 13:37:07][356168211653204][3908 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:37:09][356168211653204][0 ms][INFO] === Request start === [2025-09-07 13:37:09][356168211653204][1 ms][DEBUG] START check_scloud [2025-09-07 13:37:09][356168211653204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:37:09][356168211653204][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 25380 4969 25040148 228760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:37:09][356168211653204][301 ms][DEBUG] targetPkg: running [2025-09-07 13:37:09][356168211653204][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 13:37:09][356168211653204][301 ms][DEBUG] START check_boot_completed [2025-09-07 13:37:09][356168211653204][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:37:09][356168211653204][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:37:09][356168211653204][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:37:09][356168211653204][396 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 13:37:09][356168211653204][397 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 13:37:09][356168211653204][397 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:37:09][356168211653204][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168211653204\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8849\"}'\'' -e'"" [2025-09-07 13:37:09][356168211653204][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:37:09][356168211653204][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168211653204\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8849\"}'\'' -e'"" [2025-09-07 13:37:16][356168211653204][6565 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d23705b6-6174-485b-8632-685e6522d905","id":"QR_d23705b6-6174-485b-8632-685e6522d905","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:37:16][356168211653204][6721 ms][DEBUG] proc_open done in 6324 ms; code=255; res.len=3343 [2025-09-07 13:37:16][356168211653204][6721 ms][DEBUG] END runCmdUntilRes#1 in 6325 ms [2025-09-07 13:37:16][356168211653204][6721 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:39:04][352677531559978][1 ms][INFO] === Request start === [2025-09-07 13:39:04][352677531559978][1 ms][DEBUG] START check_scloud [2025-09-07 13:39:04][352677531559978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:39:04][352677531559978][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 25380 4969 25158100 241096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:39:04][352677531559978][246 ms][DEBUG] targetPkg: running [2025-09-07 13:39:04][352677531559978][247 ms][DEBUG] END check_scloud in 245 ms [2025-09-07 13:39:04][352677531559978][247 ms][DEBUG] START check_boot_completed [2025-09-07 13:39:04][352677531559978][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:39:04][352677531559978][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:39:04][352677531559978][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:39:04][352677531559978][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:39:04][352677531559978][341 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:39:04][352677531559978][341 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:39:04][352677531559978][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531559978\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-09-07 13:39:04][352677531559978][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:39:04][352677531559978][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531559978\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-09-07 13:39:08][352677531559978][3964 ms][DEBUG] proc_open done in 3623 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 13:39:08][352677531559978][3964 ms][DEBUG] END runCmdUntilRes#1 in 3623 ms [2025-09-07 13:39:08][352677531559978][3964 ms][WARN] Detected error: Process with pid 25380 either refused to load frida-agent, or terminated during injectionProcess with pid 25380 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 13:39:08][352677531559978][3964 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 13:39:08][352677531559978][4214 ms][DEBUG] SU: done in 250 ms; outsystem 5392 4969 12913296 194884 ep_poll 0 S system_server\n [2025-09-07 13:39:08][352677531559978][4214 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 13:39:08][352677531559978][4370 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 13:39:08][352677531559978][4370 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 13:39:08][352677531559978][4370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 13:39:08][352677531559978][4526 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 13:39:08][352677531559978][4527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 13:39:08][352677531559978][4714 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 13:39:10][352677531559978][6729 ms][DEBUG] START check_boot_completed [2025-09-07 13:39:10][352677531559978][6729 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:39:10][352677531559978][6776 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:39:10][352677531559978][6776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:39:10][352677531559978][6823 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:39:10][352677531559978][6823 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:39:13][352677531559978][9838 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 13:39:13][352677531559978][9838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531559978\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-09-07 13:39:18][352677531559978][14415 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_030d565b-e13e-4952-ac61-6a64d84ab942","id":"QR_030d565b-e13e-4952-ac61-6a64d84ab942","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:39:18][352677531559978][14571 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-07 13:39:18][352677531559978][14571 ms][DEBUG] END runCmdUntilRes#2 in 4733 ms [2025-09-07 13:39:18][352677531559978][14571 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:39:21][352677531559978][0 ms][INFO] === Request start === [2025-09-07 13:39:21][352677531559978][1 ms][DEBUG] START check_scloud [2025-09-07 13:39:21][352677531559978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:39:21][352677531559978][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 27266 4969 23838176 124196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:39:21][352677531559978][248 ms][DEBUG] targetPkg: running [2025-09-07 13:39:21][352677531559978][248 ms][DEBUG] END check_scloud in 248 ms [2025-09-07 13:39:21][352677531559978][248 ms][DEBUG] START check_boot_completed [2025-09-07 13:39:21][352677531559978][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:39:21][352677531559978][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:39:21][352677531559978][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:39:21][352677531559978][389 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 13:39:21][352677531559978][389 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 13:39:21][352677531559978][389 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:39:21][352677531559978][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531559978\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2081\"}'\'' -e'"" [2025-09-07 13:39:21][352677531559978][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:39:21][352677531559978][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531559978\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2081\"}'\'' -e'"" [2025-09-07 13:39:26][352677531559978][5497 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_badf237a-9f66-4f09-8334-7d351d654e58","id":"QR_badf237a-9f66-4f09-8334-7d351d654e58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:39:26][352677531559978][5653 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-07 13:39:26][352677531559978][5653 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-07 13:39:26][352677531559978][5653 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:49:04][352469850274045][1 ms][INFO] === Request start === [2025-09-07 13:49:04][352469850274045][1 ms][DEBUG] START check_scloud [2025-09-07 13:49:04][352469850274045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:49:04][352469850274045][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 27266 4969 23885952 138244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:49:04][352469850274045][280 ms][DEBUG] targetPkg: running [2025-09-07 13:49:04][352469850274045][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-07 13:49:04][352469850274045][280 ms][DEBUG] START check_boot_completed [2025-09-07 13:49:04][352469850274045][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:49:04][352469850274045][311 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:49:04][352469850274045][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:49:04][352469850274045][374 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 13:49:04][352469850274045][374 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 13:49:04][352469850274045][374 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:49:04][352469850274045][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469850274045\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9707\"}'\'' -e'"" [2025-09-07 13:49:04][352469850274045][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:49:04][352469850274045][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469850274045\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9707\"}'\'' -e'"" [2025-09-07 13:49:08][352469850274045][4638 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 13:49:08][352469850274045][4794 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=115 [2025-09-07 13:49:08][352469850274045][4794 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-09-07 13:49:08][352469850274045][4794 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 13:49:09][][0 ms][INFO] === Request start === [2025-09-07 13:49:09][][0 ms][DEBUG] START check_scloud [2025-09-07 13:49:09][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:49:09][][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 27266 4969 24068436 149172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:49:09][][303 ms][DEBUG] targetPkg: running [2025-09-07 13:49:09][][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 13:49:09][][303 ms][DEBUG] START check_boot_completed [2025-09-07 13:49:09][][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:49:09][][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:49:09][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:49:09][][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 13:49:09][][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 13:49:09][][412 ms][DEBUG] rawBody.length=1131 [2025-09-07 13:49:09][][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T33F0TWL\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8748\"}'\'' -e'"" [2025-09-07 13:49:09][][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:49:09][][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T33F0TWL\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8748\"}'\'' -e'"" [2025-09-07 13:49:12][][3302 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-07 13:49:12][][3458 ms][DEBUG] proc_open done in 3045 ms; code=255; res.len=95 [2025-09-07 13:49:12][][3458 ms][DEBUG] END runCmdUntilRes#1 in 3046 ms [2025-09-07 13:49:12][][3459 ms][INFO] SUCCESS response from frida (len=95) [2025-09-07 13:49:14][352469850274045][0 ms][INFO] === Request start === [2025-09-07 13:49:14][352469850274045][1 ms][DEBUG] START check_scloud [2025-09-07 13:49:14][352469850274045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:49:14][352469850274045][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 27266 4969 24254044 161088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:49:14][352469850274045][316 ms][DEBUG] targetPkg: running [2025-09-07 13:49:14][352469850274045][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 13:49:14][352469850274045][316 ms][DEBUG] START check_boot_completed [2025-09-07 13:49:14][352469850274045][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:49:14][352469850274045][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:49:14][352469850274045][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:49:14][352469850274045][456 ms][DEBUG] SU: done in 93 ms; out [2025-09-07 13:49:14][352469850274045][456 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 13:49:14][352469850274045][456 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:49:14][352469850274045][456 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469850274045\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6808\"}'\'' -e'"" [2025-09-07 13:49:14][352469850274045][456 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:49:14][352469850274045][456 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469850274045\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6808\"}'\'' -e'"" [2025-09-07 13:49:18][352469850274045][4237 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 13:49:18][352469850274045][4393 ms][DEBUG] proc_open done in 3937 ms; code=255; res.len=115 [2025-09-07 13:49:18][352469850274045][4393 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-07 13:49:18][352469850274045][4393 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 13:49:18][][0 ms][INFO] === Request start === [2025-09-07 13:49:18][][1 ms][DEBUG] START check_scloud [2025-09-07 13:49:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:49:19][][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 27266 4969 24396708 171896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:49:19][][298 ms][DEBUG] targetPkg: running [2025-09-07 13:49:19][][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 13:49:19][][298 ms][DEBUG] START check_boot_completed [2025-09-07 13:49:19][][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:49:19][][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:49:19][][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:49:19][][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:49:19][][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:49:19][][375 ms][DEBUG] rawBody.length=1141 [2025-09-07 13:49:19][][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T33F0TWL\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7740\"}'\'' -e'"" [2025-09-07 13:49:19][][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:49:19][][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T33F0TWL\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7740\"}'\'' -e'"" [2025-09-07 13:49:23][][4609 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-07 13:49:23][][4765 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=95 [2025-09-07 13:49:23][][4765 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-07 13:49:23][][4765 ms][INFO] SUCCESS response from frida (len=95) [2025-09-07 13:52:03][350330051292503][1 ms][INFO] === Request start === [2025-09-07 13:52:03][350330051292503][1 ms][DEBUG] START check_scloud [2025-09-07 13:52:03][350330051292503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:52:04][350330051292503][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 27266 4969 24498204 184148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:52:04][350330051292503][311 ms][DEBUG] targetPkg: running [2025-09-07 13:52:04][350330051292503][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 13:52:04][350330051292503][311 ms][DEBUG] START check_boot_completed [2025-09-07 13:52:04][350330051292503][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:52:04][350330051292503][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:52:04][350330051292503][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:52:04][350330051292503][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:52:04][350330051292503][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:52:04][350330051292503][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:52:04][350330051292503][530 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4259\nsuccessfulTxPacketsPerSecond: 0.6576106811916702\nretriedTxPackets: 841\nretriedTxPacketsPerSecond: 0.08635291773223953\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.5446876349264339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:52:04][350330051292503][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:52:06][350330051292503][2202 ms][DEBUG] SU: done in 1671 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.657/260.657/260.657/0.000 ms\n [2025-09-07 13:52:06][350330051292503][2202 ms][DEBUG] check_internet: online [2025-09-07 13:52:06][350330051292503][2202 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:52:06][350330051292503][2202 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330051292503\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7372\"}'\'' -e'"" [2025-09-07 13:52:06][350330051292503][2202 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:52:06][350330051292503][2202 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330051292503\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7372\"}'\'' -e'"" [2025-09-07 13:52:10][350330051292503][6419 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f375a312-dfe7-4727-aa83-95b2d4848178","id":"QR_f375a312-dfe7-4727-aa83-95b2d4848178","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:52:10][350330051292503][6575 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-09-07 13:52:10][350330051292503][6575 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-09-07 13:52:10][350330051292503][6576 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:52:12][350330051292503][0 ms][INFO] === Request start === [2025-09-07 13:52:12][350330051292503][1 ms][DEBUG] START check_scloud [2025-09-07 13:52:12][350330051292503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:52:13][350330051292503][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 27266 4969 24640676 194992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:52:13][350330051292503][251 ms][DEBUG] targetPkg: running [2025-09-07 13:52:13][350330051292503][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-07 13:52:13][350330051292503][251 ms][DEBUG] START check_boot_completed [2025-09-07 13:52:13][350330051292503][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:52:13][350330051292503][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:52:13][350330051292503][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:52:13][350330051292503][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:52:13][350330051292503][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:52:13][350330051292503][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:52:13][350330051292503][454 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4259\nsuccessfulTxPacketsPerSecond: 0.6576106811916702\nretriedTxPackets: 841\nretriedTxPacketsPerSecond: 0.08635291773223953\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.5446876349264339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:52:13][350330051292503][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:52:13][350330051292503][907 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.818/336.818/336.818/0.000 ms\n [2025-09-07 13:52:13][350330051292503][907 ms][DEBUG] check_internet: online [2025-09-07 13:52:13][350330051292503][907 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:52:13][350330051292503][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330051292503\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2412\"}'\'' -e'"" [2025-09-07 13:52:13][350330051292503][907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:52:13][350330051292503][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330051292503\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2412\"}'\'' -e'"" [2025-09-07 13:52:19][350330051292503][6265 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ef56344-99c9-4e79-8ee4-18752d8e4a7f","id":"QR_6ef56344-99c9-4e79-8ee4-18752d8e4a7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:52:19][350330051292503][6421 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-07 13:52:19][350330051292503][6421 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 13:52:19][350330051292503][6421 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:52:23][355506800680248][0 ms][INFO] === Request start === [2025-09-07 13:52:23][355506800680248][1 ms][DEBUG] START check_scloud [2025-09-07 13:52:23][355506800680248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:52:23][355506800680248][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 27266 4969 24779052 206816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:52:23][355506800680248][255 ms][DEBUG] targetPkg: running [2025-09-07 13:52:23][355506800680248][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-07 13:52:23][355506800680248][255 ms][DEBUG] START check_boot_completed [2025-09-07 13:52:23][355506800680248][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:52:23][355506800680248][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:52:23][355506800680248][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:52:23][355506800680248][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:52:23][355506800680248][348 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 13:52:23][355506800680248][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:52:23][355506800680248][457 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4259\nsuccessfulTxPacketsPerSecond: 0.6576106811916702\nretriedTxPackets: 841\nretriedTxPacketsPerSecond: 0.08635291773223953\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.5446876349264339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:52:23][355506800680248][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:52:24][355506800680248][863 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.102/285.102/285.102/0.000 ms\n [2025-09-07 13:52:24][355506800680248][863 ms][DEBUG] check_internet: online [2025-09-07 13:52:24][355506800680248][863 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:52:24][355506800680248][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800680248\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4372\"}'\'' -e'"" [2025-09-07 13:52:24][355506800680248][864 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:52:24][355506800680248][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800680248\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4372\"}'\'' -e'"" [2025-09-07 13:52:27][355506800680248][4206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb0a3e0a-1785-4955-a279-4fd7ddf97046","id":"QR_cb0a3e0a-1785-4955-a279-4fd7ddf97046","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:52:27][355506800680248][4362 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-07 13:52:27][355506800680248][4362 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-07 13:52:27][355506800680248][4362 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:52:30][355506800680248][0 ms][INFO] === Request start === [2025-09-07 13:52:30][355506800680248][1 ms][DEBUG] START check_scloud [2025-09-07 13:52:30][355506800680248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:52:30][355506800680248][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 27266 4969 24886800 217496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:52:30][355506800680248][292 ms][DEBUG] targetPkg: running [2025-09-07 13:52:30][355506800680248][292 ms][DEBUG] END check_scloud in 292 ms [2025-09-07 13:52:30][355506800680248][292 ms][DEBUG] START check_boot_completed [2025-09-07 13:52:30][355506800680248][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:52:30][355506800680248][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:52:30][355506800680248][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:52:30][355506800680248][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 13:52:30][355506800680248][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 13:52:30][355506800680248][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:52:30][355506800680248][558 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4259\nsuccessfulTxPacketsPerSecond: 0.6576106811916702\nretriedTxPackets: 841\nretriedTxPacketsPerSecond: 0.08635291773223953\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.5446876349264339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:52:30][355506800680248][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:52:31][355506800680248][919 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.490/227.490/227.490/0.000 ms\n [2025-09-07 13:52:31][355506800680248][919 ms][DEBUG] check_internet: online [2025-09-07 13:52:31][355506800680248][919 ms][DEBUG] rawBody.length=1160 [2025-09-07 13:52:31][355506800680248][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800680248\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8196\"}'\'' -e'"" [2025-09-07 13:52:31][355506800680248][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:52:31][355506800680248][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800680248\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8196\"}'\'' -e'"" [2025-09-07 13:52:35][355506800680248][5462 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c29528d6-3b3f-40da-980b-75e9fac9eee6","id":"QR_c29528d6-3b3f-40da-980b-75e9fac9eee6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:52:35][355506800680248][5619 ms][DEBUG] proc_open done in 4700 ms; code=255; res.len=3343 [2025-09-07 13:52:35][355506800680248][5619 ms][DEBUG] END runCmdUntilRes#1 in 4700 ms [2025-09-07 13:52:35][355506800680248][5619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:56:03][352350271497235][1 ms][INFO] === Request start === [2025-09-07 13:56:03][352350271497235][1 ms][DEBUG] START check_scloud [2025-09-07 13:56:03][352350271497235][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:56:03][352350271497235][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 27266 4969 24990316 230120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:56:03][352350271497235][304 ms][DEBUG] targetPkg: running [2025-09-07 13:56:03][352350271497235][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 13:56:03][352350271497235][304 ms][DEBUG] START check_boot_completed [2025-09-07 13:56:03][352350271497235][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:56:03][352350271497235][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 13:56:03][352350271497235][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:56:03][352350271497235][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:56:03][352350271497235][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 13:56:03][352350271497235][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:56:03][352350271497235][507 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4259\nsuccessfulTxPacketsPerSecond: 0.6576106811916702\nretriedTxPackets: 841\nretriedTxPacketsPerSecond: 0.08635291773223953\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4007\nsuccessfulRxPacketsPerSecond: 0.5446876349264339\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:56:03][352350271497235][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:56:06][352350271497235][2914 ms][DEBUG] SU: done in 2407 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.437/301.437/301.437/0.000 ms\n [2025-09-07 13:56:06][352350271497235][2914 ms][DEBUG] check_internet: online [2025-09-07 13:56:06][352350271497235][2914 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:56:06][352350271497235][2914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271497235\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4829\"}'\'' -e'"" [2025-09-07 13:56:06][352350271497235][2914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:56:06][352350271497235][2914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271497235\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4829\"}'\'' -e'"" [2025-09-07 13:56:11][352350271497235][7661 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_766beb95-ef4e-4b8d-a799-e99077445e42","id":"QR_766beb95-ef4e-4b8d-a799-e99077445e42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 13:56:11][352350271497235][7817 ms][DEBUG] proc_open done in 4903 ms; code=255; res.len=3343 [2025-09-07 13:56:11][352350271497235][7817 ms][DEBUG] END runCmdUntilRes#1 in 4903 ms [2025-09-07 13:56:11][352350271497235][7817 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 13:58:03][351877472535687][0 ms][INFO] === Request start === [2025-09-07 13:58:03][351877472535687][1 ms][DEBUG] START check_scloud [2025-09-07 13:58:03][351877472535687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:58:03][351877472535687][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 27266 4969 25132752 241224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 13:58:03][351877472535687][308 ms][DEBUG] targetPkg: running [2025-09-07 13:58:03][351877472535687][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 13:58:03][351877472535687][308 ms][DEBUG] START check_boot_completed [2025-09-07 13:58:03][351877472535687][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:58:03][351877472535687][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 13:58:03][351877472535687][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:58:03][351877472535687][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 13:58:03][351877472535687][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 13:58:03][351877472535687][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 13:58:03][351877472535687][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30635 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4377\nsuccessfulTxPacketsPerSecond: 0.39181570051998593\nretriedTxPackets: 881\nretriedTxPacketsPerSecond: 0.13281888153219862\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4106\nsuccessfulRxPacketsPerSecond: 0.3287267317921916\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 13:58:03][351877472535687][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 13:58:04][351877472535687][933 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.637/313.637/313.637/0.000 ms\n [2025-09-07 13:58:04][351877472535687][933 ms][DEBUG] check_internet: online [2025-09-07 13:58:04][351877472535687][933 ms][DEBUG] rawBody.length=1150 [2025-09-07 13:58:04][351877472535687][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472535687\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6955\"}'\'' -e'"" [2025-09-07 13:58:04][351877472535687][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 13:58:04][351877472535687][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472535687\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6955\"}'\'' -e'"" [2025-09-07 13:58:12][351877472535687][8728 ms][DEBUG] proc_open done in 7795 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 13:58:12][351877472535687][8729 ms][DEBUG] END runCmdUntilRes#1 in 7795 ms [2025-09-07 13:58:12][351877472535687][8729 ms][WARN] Detected error: Process with pid 27266 either refused to load frida-agent, or terminated during injectionProcess with pid 27266 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 13:58:12][351877472535687][8729 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 13:58:12][351877472535687][9119 ms][DEBUG] SU: done in 390 ms; out [2025-09-07 13:58:12][351877472535687][9119 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 13:58:12][351877472535687][9431 ms][DEBUG] SU: done in 312 ms; out [2025-09-07 13:58:12][351877472535687][9431 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 13:58:12][351877472535687][9431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 13:58:13][351877472535687][9759 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 13:58:13][351877472535687][9759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 13:58:13][351877472535687][10041 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 13:58:15][351877472535687][12055 ms][DEBUG] START check_boot_completed [2025-09-07 13:58:15][351877472535687][12056 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 13:58:15][351877472535687][12102 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 13:58:15][351877472535687][12103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 13:58:15][351877472535687][12165 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 13:58:15][351877472535687][12165 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 13:58:18][351877472535687][15180 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 13:58:18][351877472535687][15180 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472535687\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6955\"}'\'' -e'"" [2025-09-07 13:58:20][351877472535687][16820 ms][DEBUG] proc_open done in 1640 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 13:58:20][351877472535687][16820 ms][DEBUG] END runCmdUntilRes#2 in 1640 ms [2025-09-07 13:58:20][351877472535687][16820 ms][WARN] Detected error 2; Reboot the device [2025-09-07 13:58:20][351877472535687][16820 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 13:58:20][351877472535687][17101 ms][DEBUG] SU: done in 281 ms; outsystem 29127 28787 7331592 137332 0 0 R system_server\n [2025-09-07 13:58:20][351877472535687][17101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 13:58:21][351877472535687][17788 ms][DEBUG] SU: done in 687 ms; out [2025-09-07 13:59:03][351877472535687][0 ms][INFO] === Request start === [2025-09-07 13:59:03][351877472535687][0 ms][DEBUG] START check_scloud [2025-09-07 13:59:03][351877472535687][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 13:59:03][351877472535687][32 ms][DEBUG] SU: done in 32 ms; out [2025-09-07 13:59:03][351877472535687][32 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 13:59:03][351877472535687][64 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 13:59:03][351877472535687][64 ms][WARN] check_devices: no device [2025-09-07 13:59:03][351877472535687][64 ms][WARN] check_devices: no device [2025-09-07 13:59:03][351877472535687][64 ms][DEBUG] END check_scloud in 63 ms [2025-09-07 14:00:04][351877472535687][0 ms][INFO] === Request start === [2025-09-07 14:00:04][351877472535687][1 ms][DEBUG] START check_scloud [2025-09-07 14:00:04][351877472535687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:00:04][351877472535687][388 ms][DEBUG] SU: done in 387 ms; out [2025-09-07 14:00:04][351877472535687][388 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 14:00:04][351877472535687][419 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 14:00:04][351877472535687][419 ms][DEBUG] check_devices: device found [2025-09-07 14:00:04][351877472535687][419 ms][WARN] targetPkg: not running, restarting [2025-09-07 14:00:04][351877472535687][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:00:05][351877472535687][559 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 14:00:05][351877472535687][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:00:05][351877472535687][794 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 14:00:07][351877472535687][2809 ms][DEBUG] END check_scloud in 2808 ms [2025-09-07 14:00:07][351877472535687][2809 ms][DEBUG] START check_boot_completed [2025-09-07 14:00:07][351877472535687][2809 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:00:07][351877472535687][2856 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:00:07][351877472535687][2856 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:00:07][351877472535687][2981 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 14:00:07][351877472535687][2981 ms][DEBUG] END check_boot_completed in 172 ms [2025-09-07 14:00:07][351877472535687][2981 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:00:07][351877472535687][3294 ms][DEBUG] SU: done in 313 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 468\nsuccessfulTxPacketsPerSecond: 16.548148778253708\nretriedTxPackets: 51\nretriedTxPacketsPerSecond: 1.7799304137535277\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 429\nsuccessfulRxPacketsPerSecond: 17.534894077689934\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:00:07][351877472535687][3295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:00:09][351877472535687][4808 ms][DEBUG] SU: done in 1514 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.030/220.030/220.030/0.000 ms\n [2025-09-07 14:00:09][351877472535687][4809 ms][DEBUG] check_internet: online [2025-09-07 14:00:09][351877472535687][4809 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:00:09][351877472535687][4809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472535687\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1463\"}'\'' -e'"" [2025-09-07 14:00:09][351877472535687][4809 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:00:09][351877472535687][4809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472535687\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1463\"}'\'' -e'"" [2025-09-07 14:00:14][351877472535687][10120 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e714946b-7e53-47c6-9dc9-4bda846ed450","id":"QR_e714946b-7e53-47c6-9dc9-4bda846ed450","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:00:14][351877472535687][10276 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-07 14:00:14][351877472535687][10276 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-07 14:00:14][351877472535687][10276 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:00:17][351877472535687][0 ms][INFO] === Request start === [2025-09-07 14:00:17][351877472535687][1 ms][DEBUG] START check_scloud [2025-09-07 14:00:17][351877472535687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:00:17][351877472535687][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 11675 5018 23724132 117072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:00:17][351877472535687][329 ms][DEBUG] targetPkg: running [2025-09-07 14:00:17][351877472535687][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-07 14:00:17][351877472535687][329 ms][DEBUG] START check_boot_completed [2025-09-07 14:00:17][351877472535687][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:00:17][351877472535687][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:00:17][351877472535687][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:00:17][351877472535687][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:00:17][351877472535687][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:00:17][351877472535687][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:00:17][351877472535687][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 468\nsuccessfulTxPacketsPerSecond: 16.548148778253708\nretriedTxPackets: 51\nretriedTxPacketsPerSecond: 1.7799304137535277\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 429\nsuccessfulRxPacketsPerSecond: 17.534894077689934\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:00:17][351877472535687][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:00:18][351877472535687][860 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.209/231.209/231.209/0.000 ms\n [2025-09-07 14:00:18][351877472535687][860 ms][DEBUG] check_internet: online [2025-09-07 14:00:18][351877472535687][860 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:00:18][351877472535687][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472535687\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3032\"}'\'' -e'"" [2025-09-07 14:00:18][351877472535687][860 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:00:18][351877472535687][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472535687\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3032\"}'\'' -e'"" [2025-09-07 14:00:24][351877472535687][7124 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43dc2ce8-1d8e-497d-8936-c33ed518c6e4","id":"QR_43dc2ce8-1d8e-497d-8936-c33ed518c6e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:00:24][351877472535687][7280 ms][DEBUG] proc_open done in 6420 ms; code=255; res.len=3343 [2025-09-07 14:00:24][351877472535687][7280 ms][DEBUG] END runCmdUntilRes#1 in 6420 ms [2025-09-07 14:00:24][351877472535687][7280 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:00:28][351978522591470][0 ms][INFO] === Request start === [2025-09-07 14:00:28][351978522591470][0 ms][DEBUG] START check_scloud [2025-09-07 14:00:28][351978522591470][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:00:28][351978522591470][332 ms][DEBUG] SU: done in 332 ms; outu0_a118 11675 5018 23934420 108484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:00:28][351978522591470][332 ms][DEBUG] targetPkg: running [2025-09-07 14:00:28][351978522591470][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-07 14:00:28][351978522591470][333 ms][DEBUG] START check_boot_completed [2025-09-07 14:00:28][351978522591470][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:00:28][351978522591470][379 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:00:28][351978522591470][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:00:29][351978522591470][426 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:00:29][351978522591470][426 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:00:29][351978522591470][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:00:29][351978522591470][551 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 468\nsuccessfulTxPacketsPerSecond: 16.548148778253708\nretriedTxPackets: 51\nretriedTxPacketsPerSecond: 1.7799304137535277\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 429\nsuccessfulRxPacketsPerSecond: 17.534894077689934\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:00:29][351978522591470][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:00:29][351978522591470][910 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.726/226.726/226.726/0.000 ms\n [2025-09-07 14:00:29][351978522591470][910 ms][DEBUG] check_internet: online [2025-09-07 14:00:29][351978522591470][910 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:00:29][351978522591470][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522591470\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2921\"}'\'' -e'"" [2025-09-07 14:00:29][351978522591470][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:00:29][351978522591470][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522591470\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2921\"}'\'' -e'"" [2025-09-07 14:00:33][351978522591470][4722 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2cf90963-88b0-4961-8484-eaed31e3af05","id":"QR_2cf90963-88b0-4961-8484-eaed31e3af05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:00:33][351978522591470][4878 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-09-07 14:00:33][351978522591470][4878 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-07 14:00:33][351978522591470][4878 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:00:35][351978522591470][0 ms][INFO] === Request start === [2025-09-07 14:00:35][351978522591470][1 ms][DEBUG] START check_scloud [2025-09-07 14:00:35][351978522591470][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:00:36][351978522591470][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11675 5018 24106708 98812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:00:36][351978522591470][321 ms][DEBUG] targetPkg: running [2025-09-07 14:00:36][351978522591470][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-07 14:00:36][351978522591470][321 ms][DEBUG] START check_boot_completed [2025-09-07 14:00:36][351978522591470][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:00:36][351978522591470][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:00:36][351978522591470][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:00:36][351978522591470][415 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:00:36][351978522591470][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:00:36][351978522591470][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:00:36][351978522591470][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 468\nsuccessfulTxPacketsPerSecond: 16.548148778253708\nretriedTxPackets: 51\nretriedTxPacketsPerSecond: 1.7799304137535277\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 429\nsuccessfulRxPacketsPerSecond: 17.534894077689934\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:00:36][351978522591470][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:00:36][351978522591470][993 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.449/295.449/295.449/0.000 ms\n [2025-09-07 14:00:36][351978522591470][993 ms][DEBUG] check_internet: online [2025-09-07 14:00:36][351978522591470][993 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:00:36][351978522591470][993 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522591470\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9889\"}'\'' -e'"" [2025-09-07 14:00:36][351978522591470][993 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:00:36][351978522591470][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522591470\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9889\"}'\'' -e'"" [2025-09-07 14:00:42][351978522591470][6288 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f6e3622-2b55-4227-941e-08ad334e02c4","id":"QR_8f6e3622-2b55-4227-941e-08ad334e02c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:00:42][351978522591470][6444 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-09-07 14:00:42][351978522591470][6444 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-09-07 14:00:42][351978522591470][6444 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:06:03][352623174427008][1 ms][INFO] === Request start === [2025-09-07 14:06:03][352623174427008][1 ms][DEBUG] START check_scloud [2025-09-07 14:06:03][352623174427008][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:06:04][352623174427008][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 11675 5018 24150700 92716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:06:04][352623174427008][329 ms][DEBUG] targetPkg: running [2025-09-07 14:06:04][352623174427008][329 ms][DEBUG] END check_scloud in 327 ms [2025-09-07 14:06:04][352623174427008][329 ms][DEBUG] START check_boot_completed [2025-09-07 14:06:04][352623174427008][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:06:04][352623174427008][375 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:06:04][352623174427008][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:06:04][352623174427008][423 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 14:06:04][352623174427008][423 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 14:06:04][352623174427008][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:06:04][352623174427008][547 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1234\nsuccessfulTxPacketsPerSecond: 2.8071461291800275\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.34814475492441593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1282\nsuccessfulRxPacketsPerSecond: 3.125973431058177\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:06:04][352623174427008][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:06:05][352623174427008][1281 ms][DEBUG] SU: done in 734 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.949/303.949/303.949/0.000 ms\n [2025-09-07 14:06:05][352623174427008][1281 ms][DEBUG] check_internet: online [2025-09-07 14:06:05][352623174427008][1282 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:06:05][352623174427008][1282 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174427008\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6969\"}'\'' -e'"" [2025-09-07 14:06:05][352623174427008][1282 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:06:05][352623174427008][1282 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174427008\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6969\"}'\'' -e'"" [2025-09-07 14:06:09][352623174427008][5280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b14c888-cc75-46ba-b20d-a5d4a6934fae","id":"QR_4b14c888-cc75-46ba-b20d-a5d4a6934fae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:06:09][352623174427008][5436 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-09-07 14:06:09][352623174427008][5436 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-07 14:06:09][352623174427008][5437 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:06:11][352623174427008][0 ms][INFO] === Request start === [2025-09-07 14:06:11][352623174427008][1 ms][DEBUG] START check_scloud [2025-09-07 14:06:11][352623174427008][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:06:12][352623174427008][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11675 5018 24303540 98560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:06:12][352623174427008][321 ms][DEBUG] targetPkg: running [2025-09-07 14:06:12][352623174427008][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-07 14:06:12][352623174427008][321 ms][DEBUG] START check_boot_completed [2025-09-07 14:06:12][352623174427008][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:06:12][352623174427008][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:06:12][352623174427008][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:06:12][352623174427008][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:06:12][352623174427008][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:06:12][352623174427008][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:06:12][352623174427008][540 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1234\nsuccessfulTxPacketsPerSecond: 2.8071461291800275\nretriedTxPackets: 146\nretriedTxPacketsPerSecond: 0.34814475492441593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1282\nsuccessfulRxPacketsPerSecond: 3.125973431058177\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:06:12][352623174427008][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:06:12][352623174427008][930 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.135/278.135/278.135/0.000 ms\n [2025-09-07 14:06:12][352623174427008][930 ms][DEBUG] check_internet: online [2025-09-07 14:06:12][352623174427008][930 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:06:12][352623174427008][930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174427008\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-09-07 14:06:12][352623174427008][930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:06:12][352623174427008][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623174427008\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-09-07 14:06:18][352623174427008][6304 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01b9c863-c860-4e8c-bb01-5201e554713b","id":"QR_01b9c863-c860-4e8c-bb01-5201e554713b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:06:18][352623174427008][6460 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-07 14:06:18][352623174427008][6460 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-07 14:06:18][352623174427008][6460 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:10:03][357674436505193][1 ms][INFO] === Request start === [2025-09-07 14:10:03][357674436505193][1 ms][DEBUG] START check_scloud [2025-09-07 14:10:03][357674436505193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:10:04][357674436505193][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 11675 5018 24429556 110168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:10:04][357674436505193][326 ms][DEBUG] targetPkg: running [2025-09-07 14:10:04][357674436505193][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-07 14:10:04][357674436505193][326 ms][DEBUG] START check_boot_completed [2025-09-07 14:10:04][357674436505193][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:10:04][357674436505193][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:10:04][357674436505193][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:10:04][357674436505193][420 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:10:04][357674436505193][420 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:10:04][357674436505193][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:10:04][357674436505193][530 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 0.6073700875210339\nretriedTxPackets: 196\nretriedTxPacketsPerSecond: 0.1659481113445448\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.507801220714307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:10:04][357674436505193][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:10:04][357674436505193][966 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.389/327.389/327.389/0.000 ms\n [2025-09-07 14:10:04][357674436505193][966 ms][DEBUG] check_internet: online [2025-09-07 14:10:04][357674436505193][966 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:10:04][357674436505193][967 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436505193\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6130\"}'\'' -e'"" [2025-09-07 14:10:04][357674436505193][967 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:10:04][357674436505193][967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436505193\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6130\"}'\'' -e'"" [2025-09-07 14:10:09][357674436505193][5402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1137eb77-6e01-4215-8ffc-0c5d8ebec8bb","id":"QR_1137eb77-6e01-4215-8ffc-0c5d8ebec8bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:10:09][357674436505193][5559 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-07 14:10:09][357674436505193][5559 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-07 14:10:09][357674436505193][5559 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:10:11][357674436505193][0 ms][INFO] === Request start === [2025-09-07 14:10:11][357674436505193][1 ms][DEBUG] START check_scloud [2025-09-07 14:10:11][357674436505193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:10:12][357674436505193][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 11675 5018 24611068 114892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:10:12][357674436505193][301 ms][DEBUG] targetPkg: running [2025-09-07 14:10:12][357674436505193][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 14:10:12][357674436505193][301 ms][DEBUG] START check_boot_completed [2025-09-07 14:10:12][357674436505193][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:10:12][357674436505193][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:10:12][357674436505193][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:10:12][357674436505193][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:10:12][357674436505193][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:10:12][357674436505193][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:10:12][357674436505193][519 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 0.6073700875210339\nretriedTxPackets: 196\nretriedTxPacketsPerSecond: 0.1659481113445448\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.507801220714307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:10:12][357674436505193][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:10:12][357674436505193][973 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.836/312.836/312.836/0.000 ms\n [2025-09-07 14:10:12][357674436505193][973 ms][DEBUG] check_internet: online [2025-09-07 14:10:12][357674436505193][973 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:10:12][357674436505193][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436505193\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2310\"}'\'' -e'"" [2025-09-07 14:10:12][357674436505193][973 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:10:12][357674436505193][973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436505193\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2310\"}'\'' -e'"" [2025-09-07 14:10:17][357674436505193][5924 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89eab942-d143-4e24-8392-7c8f676e67b5","id":"QR_89eab942-d143-4e24-8392-7c8f676e67b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:10:17][357674436505193][6080 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-07 14:10:17][357674436505193][6080 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-09-07 14:10:17][357674436505193][6080 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:12:03][352682505239458][0 ms][INFO] === Request start === [2025-09-07 14:12:03][352682505239458][1 ms][DEBUG] START check_scloud [2025-09-07 14:12:03][352682505239458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:12:03][352682505239458][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 11675 5018 24749500 127036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:12:03][352682505239458][310 ms][DEBUG] targetPkg: running [2025-09-07 14:12:03][352682505239458][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 14:12:03][352682505239458][310 ms][DEBUG] START check_boot_completed [2025-09-07 14:12:03][352682505239458][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:12:03][352682505239458][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:12:03][352682505239458][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:12:03][352682505239458][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:12:03][352682505239458][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:12:03][352682505239458][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:12:03][352682505239458][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 0.6073700875210339\nretriedTxPackets: 196\nretriedTxPacketsPerSecond: 0.1659481113445448\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.507801220714307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:12:03][352682505239458][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:12:05][352682505239458][1872 ms][DEBUG] SU: done in 1358 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.391/305.391/305.391/0.000 ms\n [2025-09-07 14:12:05][352682505239458][1873 ms][DEBUG] check_internet: online [2025-09-07 14:12:05][352682505239458][1873 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:12:05][352682505239458][1873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505239458\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EGY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2403\"}'\'' -e'"" [2025-09-07 14:12:05][352682505239458][1873 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:12:05][352682505239458][1873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505239458\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EGY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2403\"}'\'' -e'"" [2025-09-07 14:12:08][352682505239458][5418 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_837ec073-9741-4af7-956f-e1bf2e26c537","id":"QR_837ec073-9741-4af7-956f-e1bf2e26c537","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:12:08][352682505239458][5574 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-07 14:12:08][352682505239458][5575 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-07 14:12:08][352682505239458][5575 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:12:11][352682505239458][1 ms][INFO] === Request start === [2025-09-07 14:12:11][352682505239458][1 ms][DEBUG] START check_scloud [2025-09-07 14:12:11][352682505239458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:12:11][352682505239458][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 11675 5018 24904388 137588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:12:11][352682505239458][300 ms][DEBUG] targetPkg: running [2025-09-07 14:12:11][352682505239458][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 14:12:11][352682505239458][300 ms][DEBUG] START check_boot_completed [2025-09-07 14:12:11][352682505239458][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:12:11][352682505239458][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:12:11][352682505239458][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:12:11][352682505239458][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:12:11][352682505239458][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:12:11][352682505239458][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:12:11][352682505239458][502 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 0.6073700875210339\nretriedTxPackets: 196\nretriedTxPacketsPerSecond: 0.1659481113445448\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.507801220714307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:12:11][352682505239458][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:12:12][352682505239458][924 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=307 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 307.874/307.874/307.874/0.000 ms\n [2025-09-07 14:12:12][352682505239458][924 ms][DEBUG] check_internet: online [2025-09-07 14:12:12][352682505239458][924 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:12:12][352682505239458][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505239458\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EGY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-09-07 14:12:12][352682505239458][924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:12:12][352682505239458][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505239458\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EGY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-09-07 14:12:17][352682505239458][6079 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63de85f7-d272-4b9d-9b70-ef24a0a10d3f","id":"QR_63de85f7-d272-4b9d-9b70-ef24a0a10d3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:12:17][352682505239458][6235 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 14:12:17][352682505239458][6235 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 14:12:17][352682505239458][6235 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:12:21][357275658213969][0 ms][INFO] === Request start === [2025-09-07 14:12:21][357275658213969][1 ms][DEBUG] START check_scloud [2025-09-07 14:12:21][357275658213969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:12:22][357275658213969][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 11675 5018 25081676 148188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:12:22][357275658213969][305 ms][DEBUG] targetPkg: running [2025-09-07 14:12:22][357275658213969][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 14:12:22][357275658213969][305 ms][DEBUG] START check_boot_completed [2025-09-07 14:12:22][357275658213969][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:12:22][357275658213969][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:12:22][357275658213969][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:12:22][357275658213969][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:12:22][357275658213969][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:12:22][357275658213969][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:12:22][357275658213969][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 0.6073700875210339\nretriedTxPackets: 196\nretriedTxPacketsPerSecond: 0.1659481113445448\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.507801220714307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:12:22][357275658213969][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:12:22][357275658213969][930 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=317 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 317.814/317.814/317.814/0.000 ms\n [2025-09-07 14:12:22][357275658213969][930 ms][DEBUG] check_internet: online [2025-09-07 14:12:22][357275658213969][930 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:12:22][357275658213969][930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357275658213969\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7635\"}'\'' -e'"" [2025-09-07 14:12:22][357275658213969][930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:12:22][357275658213969][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357275658213969\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7635\"}'\'' -e'"" [2025-09-07 14:12:26][357275658213969][4194 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af1414a9-9891-43dc-9998-417ce2f4163f","id":"QR_af1414a9-9891-43dc-9998-417ce2f4163f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:12:26][357275658213969][4350 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=3343 [2025-09-07 14:12:26][357275658213969][4350 ms][DEBUG] END runCmdUntilRes#1 in 3420 ms [2025-09-07 14:12:26][357275658213969][4350 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:12:28][357275658213969][0 ms][INFO] === Request start === [2025-09-07 14:12:28][357275658213969][1 ms][DEBUG] START check_scloud [2025-09-07 14:12:28][357275658213969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:12:28][357275658213969][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 11675 5018 25224052 159192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:12:28][357275658213969][304 ms][DEBUG] targetPkg: running [2025-09-07 14:12:28][357275658213969][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 14:12:28][357275658213969][305 ms][DEBUG] START check_boot_completed [2025-09-07 14:12:28][357275658213969][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:12:28][357275658213969][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:12:28][357275658213969][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:12:28][357275658213969][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:12:28][357275658213969][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:12:28][357275658213969][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:12:29][357275658213969][523 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1417\nsuccessfulTxPacketsPerSecond: 0.6073700875210339\nretriedTxPackets: 196\nretriedTxPacketsPerSecond: 0.1659481113445448\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.507801220714307\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:12:29][357275658213969][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:12:29][357275658213969][898 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.029/258.029/258.029/0.000 ms\n [2025-09-07 14:12:29][357275658213969][898 ms][DEBUG] check_internet: online [2025-09-07 14:12:29][357275658213969][898 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:12:29][357275658213969][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357275658213969\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1628\"}'\'' -e'"" [2025-09-07 14:12:29][357275658213969][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:12:29][357275658213969][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357275658213969\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1628\"}'\'' -e'"" [2025-09-07 14:12:33][357275658213969][5162 ms][DEBUG] proc_open done in 4264 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 14:12:33][357275658213969][5162 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-07 14:12:33][357275658213969][5162 ms][WARN] Detected error: Process with pid 11675 either refused to load frida-agent, or terminated during injectionProcess with pid 11675 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 14:12:33][357275658213969][5163 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 14:12:33][357275658213969][5428 ms][DEBUG] SU: done in 266 ms; outsystem 5437 5018 12525684 255320 ep_poll 0 S system_server\n [2025-09-07 14:12:33][357275658213969][5428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 14:12:34][357275658213969][5569 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 14:12:34][357275658213969][5569 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 14:12:34][357275658213969][5569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:12:34][357275658213969][5709 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 14:12:34][357275658213969][5709 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:12:34][357275658213969][5866 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 14:12:36][357275658213969][7880 ms][DEBUG] START check_boot_completed [2025-09-07 14:12:36][357275658213969][7880 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:12:36][357275658213969][7928 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:12:36][357275658213969][7928 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:12:36][357275658213969][7974 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:12:36][357275658213969][7974 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:12:39][357275658213969][10989 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 14:12:39][357275658213969][10989 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357275658213969\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1628\"}'\'' -e'"" [2025-09-07 14:12:44][357275658213969][15972 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84b533c5-dd85-4335-b116-3d87bfdaaf4f","id":"QR_84b533c5-dd85-4335-b116-3d87bfdaaf4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:12:44][357275658213969][16129 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-07 14:12:44][357275658213969][16129 ms][DEBUG] END runCmdUntilRes#2 in 5140 ms [2025-09-07 14:12:44][357275658213969][16129 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:13:04][356171110304481][1 ms][INFO] === Request start === [2025-09-07 14:13:04][356171110304481][1 ms][DEBUG] START check_scloud [2025-09-07 14:13:04][356171110304481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:13:04][356171110304481][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 19153 5018 23757640 127684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:13:04][356171110304481][284 ms][DEBUG] targetPkg: running [2025-09-07 14:13:04][356171110304481][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 14:13:04][356171110304481][284 ms][DEBUG] START check_boot_completed [2025-09-07 14:13:04][356171110304481][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:13:04][356171110304481][314 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 14:13:04][356171110304481][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:13:04][356171110304481][377 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:13:04][356171110304481][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:13:04][356171110304481][377 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:13:04][356171110304481][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356171110304481\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YT40DQY4X\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-09-07 14:13:04][356171110304481][377 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:13:04][356171110304481][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356171110304481\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YT40DQY4X\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-09-07 14:13:08][356171110304481][4532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcbb4c85-7dac-4b13-8707-9b411525df2a","id":"QR_dcbb4c85-7dac-4b13-8707-9b411525df2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:13:09][356171110304481][4688 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-07 14:13:09][356171110304481][4688 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-07 14:13:09][356171110304481][4688 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:13:11][355680652216227][0 ms][INFO] === Request start === [2025-09-07 14:13:11][355680652216227][1 ms][DEBUG] START check_scloud [2025-09-07 14:13:11][355680652216227][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:13:11][355680652216227][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 19153 5018 23807712 138500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:13:11][355680652216227][321 ms][DEBUG] targetPkg: running [2025-09-07 14:13:11][355680652216227][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-07 14:13:11][355680652216227][321 ms][DEBUG] START check_boot_completed [2025-09-07 14:13:11][355680652216227][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:13:11][355680652216227][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:13:11][355680652216227][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:13:11][355680652216227][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:13:11][355680652216227][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:13:11][355680652216227][415 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:13:11][355680652216227][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680652216227\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4133\"}'\'' -e'"" [2025-09-07 14:13:11][355680652216227][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:13:11][355680652216227][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680652216227\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4133\"}'\'' -e'"" [2025-09-07 14:13:15][355680652216227][4710 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa9e3e44-639d-4152-b9f4-0df89f32d34e","id":"QR_aa9e3e44-639d-4152-b9f4-0df89f32d34e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:13:16][355680652216227][4866 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-09-07 14:13:16][355680652216227][4867 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-07 14:13:16][355680652216227][4867 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:13:18][355680652216227][0 ms][INFO] === Request start === [2025-09-07 14:13:18][355680652216227][1 ms][DEBUG] START check_scloud [2025-09-07 14:13:18][355680652216227][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:13:18][355680652216227][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 19153 5018 23929640 150044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:13:18][355680652216227][318 ms][DEBUG] targetPkg: running [2025-09-07 14:13:18][355680652216227][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 14:13:18][355680652216227][318 ms][DEBUG] START check_boot_completed [2025-09-07 14:13:18][355680652216227][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:13:18][355680652216227][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:13:18][355680652216227][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:13:18][355680652216227][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:13:18][355680652216227][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:13:18][355680652216227][411 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:13:18][355680652216227][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680652216227\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6178\"}'\'' -e'"" [2025-09-07 14:13:18][355680652216227][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:13:18][355680652216227][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680652216227\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6178\"}'\'' -e'"" [2025-09-07 14:13:24][355680652216227][5988 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d3ec384-a8b2-4495-a095-12cb73913a0d","id":"QR_7d3ec384-a8b2-4495-a095-12cb73913a0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:13:24][355680652216227][6144 ms][DEBUG] proc_open done in 5732 ms; code=255; res.len=3343 [2025-09-07 14:13:24][355680652216227][6144 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-07 14:13:24][355680652216227][6144 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:17:03][352674520275328][1 ms][INFO] === Request start === [2025-09-07 14:17:03][352674520275328][1 ms][DEBUG] START check_scloud [2025-09-07 14:17:03][352674520275328][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:17:04][352674520275328][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 19153 5018 24006356 160968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:17:04][352674520275328][306 ms][DEBUG] targetPkg: running [2025-09-07 14:17:04][352674520275328][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 14:17:04][352674520275328][306 ms][DEBUG] START check_boot_completed [2025-09-07 14:17:04][352674520275328][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:17:04][352674520275328][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:17:04][352674520275328][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:17:04][352674520275328][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:17:04][352674520275328][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:17:04][352674520275328][385 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:17:04][352674520275328][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520275328\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2335\"}'\'' -e'"" [2025-09-07 14:17:04][352674520275328][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:17:04][352674520275328][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520275328\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2335\"}'\'' -e'"" [2025-09-07 14:17:09][352674520275328][5914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28dea9f6-1e0d-4bfa-9c83-f00f88b41758","id":"QR_28dea9f6-1e0d-4bfa-9c83-f00f88b41758","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:17:09][352674520275328][6071 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3343 [2025-09-07 14:17:09][352674520275328][6071 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-09-07 14:17:09][352674520275328][6071 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:17:12][352674520275328][0 ms][INFO] === Request start === [2025-09-07 14:17:12][352674520275328][1 ms][DEBUG] START check_scloud [2025-09-07 14:17:12][352674520275328][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:17:12][352674520275328][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 19153 5018 24144732 172620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:17:12][352674520275328][254 ms][DEBUG] targetPkg: running [2025-09-07 14:17:12][352674520275328][254 ms][DEBUG] END check_scloud in 254 ms [2025-09-07 14:17:12][352674520275328][255 ms][DEBUG] START check_boot_completed [2025-09-07 14:17:12][352674520275328][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:17:12][352674520275328][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:17:12][352674520275328][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:17:12][352674520275328][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:17:12][352674520275328][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:17:12][352674520275328][348 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:17:12][352674520275328][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520275328\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2597\"}'\'' -e'"" [2025-09-07 14:17:12][352674520275328][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:17:12][352674520275328][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520275328\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2597\"}'\'' -e'"" [2025-09-07 14:17:17][352674520275328][5456 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d71242f9-b5a7-46ff-afa8-8908f874959c","id":"QR_d71242f9-b5a7-46ff-afa8-8908f874959c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:17:17][352674520275328][5612 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-07 14:17:17][352674520275328][5612 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-07 14:17:17][352674520275328][5612 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:17:22][351771925052780][0 ms][INFO] === Request start === [2025-09-07 14:17:22][351771925052780][1 ms][DEBUG] START check_scloud [2025-09-07 14:17:22][351771925052780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:17:22][351771925052780][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19153 5018 24324196 183404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:17:22][351771925052780][317 ms][DEBUG] targetPkg: running [2025-09-07 14:17:22][351771925052780][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 14:17:22][351771925052780][317 ms][DEBUG] START check_boot_completed [2025-09-07 14:17:22][351771925052780][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:17:22][351771925052780][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:17:22][351771925052780][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:17:22][351771925052780][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:17:22][351771925052780][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:17:22][351771925052780][410 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:17:22][351771925052780][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925052780\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3489\"}'\'' -e'"" [2025-09-07 14:17:22][351771925052780][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:17:22][351771925052780][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925052780\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3489\"}'\'' -e'"" [2025-09-07 14:17:25][351771925052780][3815 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e07f2c8-bcef-48cd-8df5-40a5b501638b","id":"QR_1e07f2c8-bcef-48cd-8df5-40a5b501638b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:17:26][351771925052780][3971 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-07 14:17:26][351771925052780][3971 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-07 14:17:26][351771925052780][3971 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:17:28][351771925052780][1 ms][INFO] === Request start === [2025-09-07 14:17:28][351771925052780][1 ms][DEBUG] START check_scloud [2025-09-07 14:17:28][351771925052780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:17:28][351771925052780][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19153 5018 24478052 195588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:17:28][351771925052780][319 ms][DEBUG] targetPkg: running [2025-09-07 14:17:28][351771925052780][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 14:17:28][351771925052780][319 ms][DEBUG] START check_boot_completed [2025-09-07 14:17:28][351771925052780][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:17:28][351771925052780][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:17:28][351771925052780][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:17:28][351771925052780][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:17:28][351771925052780][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:17:28][351771925052780][413 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:17:28][351771925052780][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925052780\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2347\"}'\'' -e'"" [2025-09-07 14:17:28][351771925052780][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:17:28][351771925052780][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925052780\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2347\"}'\'' -e'"" [2025-09-07 14:17:33][351771925052780][5021 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e1a6bee-115d-4cdb-aebe-f6786b8f206a","id":"QR_3e1a6bee-115d-4cdb-aebe-f6786b8f206a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:17:33][351771925052780][5177 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-07 14:17:33][351771925052780][5177 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-07 14:17:33][351771925052780][5177 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:18:04][358080745969014][0 ms][INFO] === Request start === [2025-09-07 14:18:04][358080745969014][1 ms][DEBUG] START check_scloud [2025-09-07 14:18:04][358080745969014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:18:04][358080745969014][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 19153 5018 24589824 205360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:18:04][358080745969014][321 ms][DEBUG] targetPkg: running [2025-09-07 14:18:04][358080745969014][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 14:18:04][358080745969014][321 ms][DEBUG] START check_boot_completed [2025-09-07 14:18:04][358080745969014][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:18:04][358080745969014][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:18:04][358080745969014][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:18:04][358080745969014][416 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 14:18:04][358080745969014][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:18:04][358080745969014][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:18:04][358080745969014][540 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1715\nsuccessfulTxPacketsPerSecond: 0.13800400211606137\nretriedTxPackets: 273\nretriedTxPacketsPerSecond: 0.015333778012895708\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1696\nsuccessfulRxPacketsPerSecond: 0.13800400211606137\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:18:04][358080745969014][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:18:06][358080745969014][2336 ms][DEBUG] SU: done in 1796 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.080/303.080/303.080/0.000 ms\n [2025-09-07 14:18:06][358080745969014][2336 ms][DEBUG] check_internet: online [2025-09-07 14:18:06][358080745969014][2336 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:18:06][358080745969014][2337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745969014\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2897\"}'\'' -e'"" [2025-09-07 14:18:06][358080745969014][2337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:18:06][358080745969014][2337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745969014\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2897\"}'\'' -e'"" [2025-09-07 14:18:10][358080745969014][6304 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77614932-3131-4dcb-b420-6ffb90231eba","id":"QR_77614932-3131-4dcb-b420-6ffb90231eba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:18:10][358080745969014][6460 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-09-07 14:18:10][358080745969014][6460 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-07 14:18:10][358080745969014][6461 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:18:13][354574108211711][0 ms][INFO] === Request start === [2025-09-07 14:18:13][354574108211711][1 ms][DEBUG] START check_scloud [2025-09-07 14:18:13][354574108211711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:18:14][354574108211711][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 19153 5018 24726152 216172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:18:14][354574108211711][300 ms][DEBUG] targetPkg: running [2025-09-07 14:18:14][354574108211711][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 14:18:14][354574108211711][300 ms][DEBUG] START check_boot_completed [2025-09-07 14:18:14][354574108211711][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:18:14][354574108211711][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:18:14][354574108211711][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:18:14][354574108211711][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:18:14][354574108211711][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:18:14][354574108211711][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:18:14][354574108211711][503 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1715\nsuccessfulTxPacketsPerSecond: 0.13800400211606137\nretriedTxPackets: 273\nretriedTxPacketsPerSecond: 0.015333778012895708\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1696\nsuccessfulRxPacketsPerSecond: 0.13800400211606137\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:18:14][354574108211711][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:18:14][354574108211711][988 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=369 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 369.242/369.242/369.242/0.000 ms\n [2025-09-07 14:18:14][354574108211711][988 ms][DEBUG] check_internet: online [2025-09-07 14:18:14][354574108211711][988 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:18:14][354574108211711][988 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354574108211711\",\"model\":\"SM-G973U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3615\"}'\'' -e'"" [2025-09-07 14:18:14][354574108211711][988 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:18:14][354574108211711][988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354574108211711\",\"model\":\"SM-G973U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3615\"}'\'' -e'"" [2025-09-07 14:18:19][354574108211711][6142 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb909d4c-3f90-4d96-bef9-622722cf847e","id":"QR_cb909d4c-3f90-4d96-bef9-622722cf847e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:18:20][354574108211711][6299 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-07 14:18:20][354574108211711][6299 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-09-07 14:18:20][354574108211711][6299 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:18:23][354574108211711][0 ms][INFO] === Request start === [2025-09-07 14:18:23][354574108211711][1 ms][DEBUG] START check_scloud [2025-09-07 14:18:23][354574108211711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:18:24][354574108211711][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 19153 5018 24877008 228092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:18:24][354574108211711][320 ms][DEBUG] targetPkg: running [2025-09-07 14:18:24][354574108211711][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 14:18:24][354574108211711][320 ms][DEBUG] START check_boot_completed [2025-09-07 14:18:24][354574108211711][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:18:24][354574108211711][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:18:24][354574108211711][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:18:24][354574108211711][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:18:24][354574108211711][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:18:24][354574108211711][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:18:24][354574108211711][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1715\nsuccessfulTxPacketsPerSecond: 0.13800400211606137\nretriedTxPackets: 273\nretriedTxPacketsPerSecond: 0.015333778012895708\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1696\nsuccessfulRxPacketsPerSecond: 0.13800400211606137\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:18:24][354574108211711][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:18:24][354574108211711][882 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=263 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 263.205/263.205/263.205/0.000 ms\n [2025-09-07 14:18:24][354574108211711][882 ms][DEBUG] check_internet: online [2025-09-07 14:18:24][354574108211711][882 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:18:24][354574108211711][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354574108211711\",\"model\":\"SM-G973U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4969\"}'\'' -e'"" [2025-09-07 14:18:24][354574108211711][882 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:18:24][354574108211711][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354574108211711\",\"model\":\"SM-G973U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4969\"}'\'' -e'"" [2025-09-07 14:18:27][354574108211711][4240 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c94d3a18-3380-4300-b09d-2ab322a4cbff","id":"QR_c94d3a18-3380-4300-b09d-2ab322a4cbff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:18:28][354574108211711][4397 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-07 14:18:28][354574108211711][4397 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-07 14:18:28][354574108211711][4397 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:22:03][352838656749295][1 ms][INFO] === Request start === [2025-09-07 14:22:03][352838656749295][1 ms][DEBUG] START check_scloud [2025-09-07 14:22:03][352838656749295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:22:03][352838656749295][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19153 5018 24979568 240092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:22:03][352838656749295][304 ms][DEBUG] targetPkg: running [2025-09-07 14:22:03][352838656749295][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 14:22:03][352838656749295][304 ms][DEBUG] START check_boot_completed [2025-09-07 14:22:03][352838656749295][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:22:03][352838656749295][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:22:03][352838656749295][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:22:04][352838656749295][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:22:04][352838656749295][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:22:04][352838656749295][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:22:04][352838656749295][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30537 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1937\nsuccessfulTxPacketsPerSecond: 0.7367264786797331\nretriedTxPackets: 329\nretriedTxPacketsPerSecond: 0.18584091354083357\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1888\nsuccessfulRxPacketsPerSecond: 0.637168846425715\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:22:04][352838656749295][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:22:05][352838656749295][2225 ms][DEBUG] SU: done in 1734 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=404 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 404.228/404.228/404.228/0.000 ms\n [2025-09-07 14:22:05][352838656749295][2225 ms][DEBUG] check_internet: online [2025-09-07 14:22:05][352838656749295][2225 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:22:05][352838656749295][2225 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656749295\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4848\"}'\'' -e'"" [2025-09-07 14:22:05][352838656749295][2225 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:22:05][352838656749295][2225 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656749295\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4848\"}'\'' -e'"" [2025-09-07 14:22:09][352838656749295][6146 ms][DEBUG] proc_open done in 3920 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 14:22:09][352838656749295][6146 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-07 14:22:09][352838656749295][6146 ms][WARN] Detected error: Process with pid 19153 either refused to load frida-agent, or terminated during injectionProcess with pid 19153 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 14:22:09][352838656749295][6146 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 14:22:10][352838656749295][6427 ms][DEBUG] SU: done in 281 ms; outsystem 5437 5018 12538340 248724 ep_poll 0 S system_server\nsystem 20566 1 12337716 117464 ptrace_stop 0 t system_server\n [2025-09-07 14:22:10][352838656749295][6427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 14:22:10][352838656749295][6554 ms][DEBUG] SU: done in 127 ms; out [2025-09-07 14:22:10][352838656749295][6554 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 14:22:10][352838656749295][6554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:22:10][352838656749295][6693 ms][DEBUG] SU: done in 138 ms; out [2025-09-07 14:22:10][352838656749295][6693 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:22:10][352838656749295][6865 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 14:22:12][352838656749295][8880 ms][DEBUG] START check_boot_completed [2025-09-07 14:22:12][352838656749295][8880 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:22:12][352838656749295][8927 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:22:12][352838656749295][8927 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:22:12][352838656749295][8973 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:22:12][352838656749295][8974 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:22:15][352838656749295][11988 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 14:22:15][352838656749295][11988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656749295\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4848\"}'\'' -e'"" [2025-09-07 14:22:16][352838656749295][12488 ms][DEBUG] proc_open done in 500 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-07 14:22:16][352838656749295][12488 ms][DEBUG] END runCmdUntilRes#2 in 500 ms [2025-09-07 14:22:16][352838656749295][12488 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-07 14:22:16][352838656749295][12488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 14:22:16][352838656749295][12769 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 14:23:03][352838656749295][0 ms][INFO] === Request start === [2025-09-07 14:23:03][352838656749295][1 ms][DEBUG] START check_scloud [2025-09-07 14:23:03][352838656749295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:23:03][352838656749295][381 ms][DEBUG] SU: done in 380 ms; out [2025-09-07 14:23:03][352838656749295][381 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 14:23:03][352838656749295][412 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 14:23:03][352838656749295][412 ms][DEBUG] check_devices: device found [2025-09-07 14:23:03][352838656749295][412 ms][WARN] targetPkg: not running, restarting [2025-09-07 14:23:03][352838656749295][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:23:03][352838656749295][568 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 14:23:03][352838656749295][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:23:04][352838656749295][787 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 14:23:06][352838656749295][2802 ms][DEBUG] END check_scloud in 2801 ms [2025-09-07 14:23:06][352838656749295][2802 ms][DEBUG] START check_boot_completed [2025-09-07 14:23:06][352838656749295][2802 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:23:06][352838656749295][2849 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:23:06][352838656749295][2849 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:23:06][352838656749295][2912 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:23:06][352838656749295][2912 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:23:06][352838656749295][2912 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:23:06][352838656749295][2912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656749295\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4551\"}'\'' -e'"" [2025-09-07 14:23:06][352838656749295][2912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:23:06][352838656749295][2912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656749295\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4551\"}'\'' -e'"" [2025-09-07 14:23:11][352838656749295][8223 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6b698fa-e26f-45db-a3c6-2e2d1dcefec6","id":"QR_b6b698fa-e26f-45db-a3c6-2e2d1dcefec6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:23:11][352838656749295][8379 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-07 14:23:11][352838656749295][8379 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-07 14:23:11][352838656749295][8379 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:23:13][352838656749295][0 ms][INFO] === Request start === [2025-09-07 14:23:13][352838656749295][1 ms][DEBUG] START check_scloud [2025-09-07 14:23:13][352838656749295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:23:14][352838656749295][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 25381 20741 24033252 115408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:23:14][352838656749295][322 ms][DEBUG] targetPkg: running [2025-09-07 14:23:14][352838656749295][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 14:23:14][352838656749295][322 ms][DEBUG] START check_boot_completed [2025-09-07 14:23:14][352838656749295][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:23:14][352838656749295][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:23:14][352838656749295][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:23:14][352838656749295][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:23:14][352838656749295][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:23:14][352838656749295][431 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:23:14][352838656749295][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656749295\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3013\"}'\'' -e'"" [2025-09-07 14:23:14][352838656749295][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:23:14][352838656749295][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656749295\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3013\"}'\'' -e'"" [2025-09-07 14:23:19][352838656749295][5961 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce3f11b7-2996-4382-b45e-49a02de5a862","id":"QR_ce3f11b7-2996-4382-b45e-49a02de5a862","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:23:20][352838656749295][6117 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3343 [2025-09-07 14:23:20][352838656749295][6117 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-09-07 14:23:20][352838656749295][6117 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:23:24][350152500143883][0 ms][INFO] === Request start === [2025-09-07 14:23:24][350152500143883][1 ms][DEBUG] START check_scloud [2025-09-07 14:23:24][350152500143883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:23:24][350152500143883][358 ms][DEBUG] SU: done in 357 ms; outu0_a118 25381 20741 24213560 97632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:23:24][350152500143883][358 ms][DEBUG] targetPkg: running [2025-09-07 14:23:24][350152500143883][358 ms][DEBUG] END check_scloud in 357 ms [2025-09-07 14:23:24][350152500143883][358 ms][DEBUG] START check_boot_completed [2025-09-07 14:23:24][350152500143883][358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:23:24][350152500143883][405 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:23:24][350152500143883][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:23:24][350152500143883][467 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:23:24][350152500143883][467 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:23:24][350152500143883][467 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:23:24][350152500143883][467 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152500143883\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2607\"}'\'' -e'"" [2025-09-07 14:23:24][350152500143883][467 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:23:24][350152500143883][467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152500143883\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2607\"}'\'' -e'"" [2025-09-07 14:23:29][350152500143883][4919 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20baeaa6-dddf-42f5-9255-4b89010d75e5","id":"QR_20baeaa6-dddf-42f5-9255-4b89010d75e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:23:29][350152500143883][5075 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-07 14:23:29][350152500143883][5075 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-07 14:23:29][350152500143883][5075 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:23:31][350152500143883][0 ms][INFO] === Request start === [2025-09-07 14:23:31][350152500143883][1 ms][DEBUG] START check_scloud [2025-09-07 14:23:31][350152500143883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:23:32][350152500143883][418 ms][DEBUG] SU: done in 417 ms; outu0_a118 25381 20741 24364316 91720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:23:32][350152500143883][418 ms][DEBUG] targetPkg: running [2025-09-07 14:23:32][350152500143883][418 ms][DEBUG] END check_scloud in 417 ms [2025-09-07 14:23:32][350152500143883][418 ms][DEBUG] START check_boot_completed [2025-09-07 14:23:32][350152500143883][418 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:23:32][350152500143883][464 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:23:32][350152500143883][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:23:32][350152500143883][527 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:23:32][350152500143883][527 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:23:32][350152500143883][527 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:23:32][350152500143883][527 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152500143883\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2607\"}'\'' -e'"" [2025-09-07 14:23:32][350152500143883][528 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:23:32][350152500143883][528 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152500143883\",\"model\":\"SM-A536J\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2607\"}'\'' -e'"" [2025-09-07 14:23:38][350152500143883][6791 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34c85add-200e-4812-a64a-cda5f12e5f0b","id":"QR_34c85add-200e-4812-a64a-cda5f12e5f0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:23:38][350152500143883][6947 ms][DEBUG] proc_open done in 6419 ms; code=255; res.len=3343 [2025-09-07 14:23:38][350152500143883][6947 ms][DEBUG] END runCmdUntilRes#1 in 6420 ms [2025-09-07 14:23:38][350152500143883][6947 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:24:03][350287319004411][0 ms][INFO] === Request start === [2025-09-07 14:24:03][350287319004411][1 ms][DEBUG] START check_scloud [2025-09-07 14:24:03][350287319004411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:24:03][350287319004411][364 ms][DEBUG] SU: done in 364 ms; outu0_a118 25381 20741 24426696 65672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:24:03][350287319004411][365 ms][DEBUG] targetPkg: running [2025-09-07 14:24:03][350287319004411][365 ms][DEBUG] END check_scloud in 364 ms [2025-09-07 14:24:03][350287319004411][365 ms][DEBUG] START check_boot_completed [2025-09-07 14:24:03][350287319004411][365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:24:03][350287319004411][411 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:24:03][350287319004411][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:24:03][350287319004411][458 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:24:03][350287319004411][458 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:24:03][350287319004411][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:24:03][350287319004411][599 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 673\nsuccessfulTxPacketsPerSecond: 5.799107161316483\nretriedTxPackets: 126\nretriedTxPacketsPerSecond: 1.7994332383690033\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 714\nsuccessfulRxPacketsPerSecond: 5.531894962792028\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:24:03][350287319004411][599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:24:04][350287319004411][1614 ms][DEBUG] SU: done in 1015 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.537/220.537/220.537/0.000 ms\n [2025-09-07 14:24:04][350287319004411][1614 ms][DEBUG] check_internet: online [2025-09-07 14:24:04][350287319004411][1614 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:24:04][350287319004411][1614 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287319004411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7491\"}'\'' -e'"" [2025-09-07 14:24:04][350287319004411][1614 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:24:04][350287319004411][1614 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287319004411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7491\"}'\'' -e'"" [2025-09-07 14:24:09][350287319004411][6269 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e845934-ef74-493e-b530-5e404dbb3255","id":"QR_9e845934-ef74-493e-b530-5e404dbb3255","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:24:09][350287319004411][6425 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 14:24:09][350287319004411][6426 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 14:24:09][350287319004411][6426 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:24:12][350287319004411][1 ms][INFO] === Request start === [2025-09-07 14:24:12][350287319004411][1 ms][DEBUG] START check_scloud [2025-09-07 14:24:12][350287319004411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:24:12][350287319004411][350 ms][DEBUG] SU: done in 349 ms; outu0_a118 25381 20741 24579536 81476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:24:12][350287319004411][350 ms][DEBUG] targetPkg: running [2025-09-07 14:24:12][350287319004411][351 ms][DEBUG] END check_scloud in 349 ms [2025-09-07 14:24:12][350287319004411][351 ms][DEBUG] START check_boot_completed [2025-09-07 14:24:12][350287319004411][351 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:24:12][350287319004411][397 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:24:12][350287319004411][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:24:12][350287319004411][460 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:24:12][350287319004411][460 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:24:12][350287319004411][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:24:12][350287319004411][600 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 673\nsuccessfulTxPacketsPerSecond: 5.799107161316483\nretriedTxPackets: 126\nretriedTxPacketsPerSecond: 1.7994332383690033\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 714\nsuccessfulRxPacketsPerSecond: 5.531894962792028\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:24:12][350287319004411][601 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:24:13][350287319004411][930 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.390/227.390/227.390/0.000 ms\n [2025-09-07 14:24:13][350287319004411][930 ms][DEBUG] check_internet: online [2025-09-07 14:24:13][350287319004411][930 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:24:13][350287319004411][930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287319004411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2609\"}'\'' -e'"" [2025-09-07 14:24:13][350287319004411][930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:24:13][350287319004411][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287319004411\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2609\"}'\'' -e'"" [2025-09-07 14:24:17][350287319004411][5646 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bda2398c-542b-4d4e-af26-06e3d445be8c","id":"QR_bda2398c-542b-4d4e-af26-06e3d445be8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:24:17][350287319004411][5802 ms][DEBUG] proc_open done in 4872 ms; code=255; res.len=3343 [2025-09-07 14:24:17][350287319004411][5802 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-07 14:24:17][350287319004411][5802 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:25:03][357450472627922][0 ms][INFO] === Request start === [2025-09-07 14:25:03][357450472627922][1 ms][DEBUG] START check_scloud [2025-09-07 14:25:03][357450472627922][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:25:04][357450472627922][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 25381 20741 24707728 99084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:25:04][357450472627922][299 ms][DEBUG] targetPkg: running [2025-09-07 14:25:04][357450472627922][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 14:25:04][357450472627922][299 ms][DEBUG] START check_boot_completed [2025-09-07 14:25:04][357450472627922][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:25:04][357450472627922][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:25:04][357450472627922][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:25:04][357450472627922][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:25:04][357450472627922][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:25:04][357450472627922][393 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:25:04][357450472627922][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472627922\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3981\"}'\'' -e'"" [2025-09-07 14:25:04][357450472627922][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:25:04][357450472627922][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472627922\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3981\"}'\'' -e'"" [2025-09-07 14:25:07][357450472627922][4111 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_786c5e97-0f2c-4963-bf22-35ef232879ac","id":"QR_786c5e97-0f2c-4963-bf22-35ef232879ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:25:07][357450472627922][4267 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-07 14:25:07][357450472627922][4267 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-07 14:25:07][357450472627922][4267 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:25:10][357450472627922][0 ms][INFO] === Request start === [2025-09-07 14:25:10][357450472627922][1 ms][DEBUG] START check_scloud [2025-09-07 14:25:10][357450472627922][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:25:10][357450472627922][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 25381 20741 24842956 111272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:25:10][357450472627922][269 ms][DEBUG] targetPkg: running [2025-09-07 14:25:10][357450472627922][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 14:25:10][357450472627922][269 ms][DEBUG] START check_boot_completed [2025-09-07 14:25:10][357450472627922][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:25:10][357450472627922][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:25:10][357450472627922][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:25:10][357450472627922][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:25:10][357450472627922][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:25:10][357450472627922][347 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:25:10][357450472627922][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472627922\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9121\"}'\'' -e'"" [2025-09-07 14:25:10][357450472627922][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:25:10][357450472627922][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450472627922\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9121\"}'\'' -e'"" [2025-09-07 14:25:16][357450472627922][5908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21ddf9e1-881c-4af1-b1c2-3ba2a4203145","id":"QR_21ddf9e1-881c-4af1-b1c2-3ba2a4203145","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:25:16][357450472627922][6064 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-07 14:25:16][357450472627922][6064 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-07 14:25:16][357450472627922][6064 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:29:03][351877479725034][1 ms][INFO] === Request start === [2025-09-07 14:29:03][351877479725034][1 ms][DEBUG] START check_scloud [2025-09-07 14:29:03][351877479725034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:29:03][351877479725034][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 25381 20741 24954700 119940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:29:03][351877479725034][318 ms][DEBUG] targetPkg: running [2025-09-07 14:29:03][351877479725034][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 14:29:03][351877479725034][318 ms][DEBUG] START check_boot_completed [2025-09-07 14:29:03][351877479725034][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:29:03][351877479725034][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:29:03][351877479725034][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:29:03][351877479725034][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:29:03][351877479725034][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:29:03][351877479725034][396 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:29:03][351877479725034][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877479725034\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7924\"}'\'' -e'"" [2025-09-07 14:29:03][351877479725034][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:29:03][351877479725034][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877479725034\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7924\"}'\'' -e'"" [2025-09-07 14:29:08][351877479725034][4879 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65184ebe-ebb4-463c-b3d2-83b12561391b","id":"QR_65184ebe-ebb4-463c-b3d2-83b12561391b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:29:08][351877479725034][5035 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-07 14:29:08][351877479725034][5035 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-07 14:29:08][351877479725034][5035 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:29:10][351877479725034][0 ms][INFO] === Request start === [2025-09-07 14:29:10][351877479725034][1 ms][DEBUG] START check_scloud [2025-09-07 14:29:10][351877479725034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:29:11][351877479725034][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 25381 20741 25121748 130744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:29:11][351877479725034][293 ms][DEBUG] targetPkg: running [2025-09-07 14:29:11][351877479725034][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-07 14:29:11][351877479725034][293 ms][DEBUG] START check_boot_completed [2025-09-07 14:29:11][351877479725034][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:29:11][351877479725034][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:29:11][351877479725034][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:29:11][351877479725034][402 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:29:11][351877479725034][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:29:11][351877479725034][402 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:29:11][351877479725034][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877479725034\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-09-07 14:29:11][351877479725034][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:29:11][351877479725034][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877479725034\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-09-07 14:29:16][351877479725034][5510 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a48c5e18-9e79-47b8-9f29-ef5c4c2b6c01","id":"QR_a48c5e18-9e79-47b8-9f29-ef5c4c2b6c01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:29:16][351877479725034][5667 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-07 14:29:16][351877479725034][5667 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-07 14:29:16][351877479725034][5667 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:30:04][357962505193763][0 ms][INFO] === Request start === [2025-09-07 14:30:04][357962505193763][1 ms][DEBUG] START check_scloud [2025-09-07 14:30:04][357962505193763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:30:04][357962505193763][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 25381 20741 25208980 142080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:30:04][357962505193763][279 ms][DEBUG] targetPkg: running [2025-09-07 14:30:04][357962505193763][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-07 14:30:04][357962505193763][279 ms][DEBUG] START check_boot_completed [2025-09-07 14:30:04][357962505193763][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:30:04][357962505193763][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:30:04][357962505193763][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:30:04][357962505193763][389 ms][DEBUG] SU: done in 64 ms; out [2025-09-07 14:30:04][357962505193763][390 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 14:30:04][357962505193763][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:30:04][357962505193763][515 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 962\nsuccessfulTxPacketsPerSecond: 0.26038277709428914\nretriedTxPackets: 195\nretriedTxPacketsPerSecond: 0.20458645695712016\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 970\nsuccessfulRxPacketsPerSecond: 0.13019139613687844\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:30:04][357962505193763][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:30:06][357962505193763][1997 ms][DEBUG] SU: done in 1482 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.606/299.606/299.606/0.000 ms\n [2025-09-07 14:30:06][357962505193763][1997 ms][DEBUG] check_internet: online [2025-09-07 14:30:06][357962505193763][1997 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:30:06][357962505193763][1997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505193763\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6550\"}'\'' -e'"" [2025-09-07 14:30:06][357962505193763][1997 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:30:06][357962505193763][1997 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505193763\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6550\"}'\'' -e'"" [2025-09-07 14:30:10][357962505193763][5902 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eaab648-06a0-4df4-af0b-6679063735c5","id":"QR_0eaab648-06a0-4df4-af0b-6679063735c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:30:10][357962505193763][6058 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-07 14:30:10][357962505193763][6058 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-07 14:30:10][357962505193763][6058 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:30:12][357962505193763][0 ms][INFO] === Request start === [2025-09-07 14:30:12][357962505193763][1 ms][DEBUG] START check_scloud [2025-09-07 14:30:12][357962505193763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:30:12][357962505193763][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 25381 20741 25379100 154068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:30:12][357962505193763][303 ms][DEBUG] targetPkg: running [2025-09-07 14:30:12][357962505193763][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 14:30:12][357962505193763][303 ms][DEBUG] START check_boot_completed [2025-09-07 14:30:12][357962505193763][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:30:12][357962505193763][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:30:12][357962505193763][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:30:13][357962505193763][444 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 14:30:13][357962505193763][444 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 14:30:13][357962505193763][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:30:13][357962505193763][553 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 962\nsuccessfulTxPacketsPerSecond: 0.26038277709428914\nretriedTxPackets: 195\nretriedTxPacketsPerSecond: 0.20458645695712016\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 970\nsuccessfulRxPacketsPerSecond: 0.13019139613687844\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:30:13][357962505193763][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:30:13][357962505193763][865 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.731/227.731/227.731/0.000 ms\n [2025-09-07 14:30:13][357962505193763][865 ms][DEBUG] check_internet: online [2025-09-07 14:30:13][357962505193763][865 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:30:13][357962505193763][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505193763\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6287\"}'\'' -e'"" [2025-09-07 14:30:13][357962505193763][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:30:13][357962505193763][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505193763\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6287\"}'\'' -e'"" [2025-09-07 14:30:17][357962505193763][5208 ms][DEBUG] proc_open done in 4343 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 14:30:17][357962505193763][5208 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-09-07 14:30:17][357962505193763][5208 ms][WARN] Detected error: Process with pid 25381 either refused to load frida-agent, or terminated during injectionProcess with pid 25381 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 14:30:17][357962505193763][5208 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 14:30:18][357962505193763][5458 ms][DEBUG] SU: done in 250 ms; outsystem 21081 20741 13302192 579528 ep_poll 0 S system_server\n [2025-09-07 14:30:18][357962505193763][5459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 14:30:18][357962505193763][5616 ms][DEBUG] SU: done in 158 ms; out [2025-09-07 14:30:18][357962505193763][5616 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 14:30:18][357962505193763][5616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:30:18][357962505193763][5739 ms][DEBUG] SU: done in 123 ms; out [2025-09-07 14:30:18][357962505193763][5739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:30:18][357962505193763][5896 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 14:30:20][357962505193763][7911 ms][DEBUG] START check_boot_completed [2025-09-07 14:30:20][357962505193763][7911 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:30:20][357962505193763][7958 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:30:20][357962505193763][7958 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:30:20][357962505193763][8004 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:30:20][357962505193763][8004 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:30:23][357962505193763][11019 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 14:30:23][357962505193763][11019 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505193763\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6287\"}'\'' -e'"" [2025-09-07 14:30:28][357962505193763][16096 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58847e1e-dc3d-48f0-8f12-c95fbd0b6a5a","id":"QR_58847e1e-dc3d-48f0-8f12-c95fbd0b6a5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:30:28][357962505193763][16252 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-07 14:30:28][357962505193763][16253 ms][DEBUG] END runCmdUntilRes#2 in 5233 ms [2025-09-07 14:30:28][357962505193763][16253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:33:03][352288962989682][1 ms][INFO] === Request start === [2025-09-07 14:33:03][352288962989682][1 ms][DEBUG] START check_scloud [2025-09-07 14:33:03][352288962989682][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:33:03][352288962989682][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 1659 20741 23892208 128216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:33:03][352288962989682][318 ms][DEBUG] targetPkg: running [2025-09-07 14:33:03][352288962989682][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 14:33:03][352288962989682][318 ms][DEBUG] START check_boot_completed [2025-09-07 14:33:03][352288962989682][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:33:03][352288962989682][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:33:03][352288962989682][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:33:03][352288962989682][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:33:03][352288962989682][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:33:03][352288962989682][396 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:33:03][352288962989682][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962989682\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7260\"}'\'' -e'"" [2025-09-07 14:33:03][352288962989682][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:33:03][352288962989682][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962989682\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7260\"}'\'' -e'"" [2025-09-07 14:33:07][352288962989682][4785 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e6cbae2-c885-485f-9d35-41250f9b7bfe","id":"QR_7e6cbae2-c885-485f-9d35-41250f9b7bfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:33:08][352288962989682][4942 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-09-07 14:33:08][352288962989682][4942 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-09-07 14:33:08][352288962989682][4942 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:33:10][352288962989682][0 ms][INFO] === Request start === [2025-09-07 14:33:10][352288962989682][1 ms][DEBUG] START check_scloud [2025-09-07 14:33:10][352288962989682][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:33:10][352288962989682][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 1659 20741 24012024 138912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:33:10][352288962989682][324 ms][DEBUG] targetPkg: running [2025-09-07 14:33:10][352288962989682][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 14:33:10][352288962989682][324 ms][DEBUG] START check_boot_completed [2025-09-07 14:33:10][352288962989682][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:33:10][352288962989682][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:33:10][352288962989682][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:33:10][352288962989682][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:33:10][352288962989682][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:33:10][352288962989682][402 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:33:10][352288962989682][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962989682\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1116\"}'\'' -e'"" [2025-09-07 14:33:10][352288962989682][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:33:10][352288962989682][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962989682\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1116\"}'\'' -e'"" [2025-09-07 14:33:15][352288962989682][5338 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d348d5b9-5548-41e0-92e5-976e971626c6","id":"QR_d348d5b9-5548-41e0-92e5-976e971626c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:33:15][352288962989682][5494 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 14:33:15][352288962989682][5494 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 14:33:15][352288962989682][5494 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:34:03][350543332536056][0 ms][INFO] === Request start === [2025-09-07 14:34:03][350543332536056][1 ms][DEBUG] START check_scloud [2025-09-07 14:34:03][350543332536056][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:34:03][350543332536056][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 1659 20741 24160632 150816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:34:03][350543332536056][295 ms][DEBUG] targetPkg: running [2025-09-07 14:34:03][350543332536056][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-07 14:34:03][350543332536056][295 ms][DEBUG] START check_boot_completed [2025-09-07 14:34:03][350543332536056][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:34:03][350543332536056][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:34:03][350543332536056][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:34:03][350543332536056][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:34:03][350543332536056][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:34:03][350543332536056][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:34:04][350543332536056][544 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1108\nsuccessfulTxPacketsPerSecond: 0.590158898262265\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.18998265902963327\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.49314647663011185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:34:04][350543332536056][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:34:04][350543332536056][889 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.797/255.797/255.797/0.000 ms\n [2025-09-07 14:34:04][350543332536056][889 ms][DEBUG] check_internet: online [2025-09-07 14:34:04][350543332536056][889 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:34:04][350543332536056][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543332536056\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3063\"}'\'' -e'"" [2025-09-07 14:34:04][350543332536056][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:34:04][350543332536056][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543332536056\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3063\"}'\'' -e'"" [2025-09-07 14:34:09][350543332536056][5715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0c77393-c695-423f-9ad1-8bc601eea06f","id":"QR_c0c77393-c695-423f-9ad1-8bc601eea06f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:34:09][350543332536056][5871 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-07 14:34:09][350543332536056][5871 ms][DEBUG] END runCmdUntilRes#1 in 4982 ms [2025-09-07 14:34:09][350543332536056][5871 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:34:11][350543332536056][1 ms][INFO] === Request start === [2025-09-07 14:34:11][350543332536056][1 ms][DEBUG] START check_scloud [2025-09-07 14:34:11][350543332536056][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:34:12][350543332536056][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 1659 20741 24322524 161760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:34:12][350543332536056][261 ms][DEBUG] targetPkg: running [2025-09-07 14:34:12][350543332536056][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-07 14:34:12][350543332536056][261 ms][DEBUG] START check_boot_completed [2025-09-07 14:34:12][350543332536056][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:34:12][350543332536056][306 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 14:34:12][350543332536056][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:34:12][350543332536056][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:34:12][350543332536056][353 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 14:34:12][350543332536056][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:34:12][350543332536056][464 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1108\nsuccessfulTxPacketsPerSecond: 0.590158898262265\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.18998265902963327\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.49314647663011185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:34:12][350543332536056][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:34:12][350543332536056][837 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.016/260.016/260.016/0.000 ms\n [2025-09-07 14:34:12][350543332536056][838 ms][DEBUG] check_internet: online [2025-09-07 14:34:12][350543332536056][838 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:34:12][350543332536056][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543332536056\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5368\"}'\'' -e'"" [2025-09-07 14:34:12][350543332536056][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:34:12][350543332536056][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543332536056\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5368\"}'\'' -e'"" [2025-09-07 14:34:17][350543332536056][5774 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7913d6e9-282e-49c6-b40f-4b5986247e31","id":"QR_7913d6e9-282e-49c6-b40f-4b5986247e31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:34:17][350543332536056][5930 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 14:34:17][350543332536056][5930 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 14:34:17][350543332536056][5930 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:34:22][352660830063181][0 ms][INFO] === Request start === [2025-09-07 14:34:22][352660830063181][1 ms][DEBUG] START check_scloud [2025-09-07 14:34:22][352660830063181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:34:22][352660830063181][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 1659 20741 24446564 172596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:34:22][352660830063181][288 ms][DEBUG] targetPkg: running [2025-09-07 14:34:22][352660830063181][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-07 14:34:22][352660830063181][289 ms][DEBUG] START check_boot_completed [2025-09-07 14:34:22][352660830063181][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:34:22][352660830063181][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:34:22][352660830063181][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:34:22][352660830063181][398 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:34:22][352660830063181][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:34:22][352660830063181][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:34:22][352660830063181][554 ms][DEBUG] SU: done in 157 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1108\nsuccessfulTxPacketsPerSecond: 0.590158898262265\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.18998265902963327\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.49314647663011185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:34:22][352660830063181][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:34:23][352660830063181][976 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.406/323.406/323.406/0.000 ms\n [2025-09-07 14:34:23][352660830063181][976 ms][DEBUG] check_internet: online [2025-09-07 14:34:23][352660830063181][976 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:34:23][352660830063181][976 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830063181\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8799\"}'\'' -e'"" [2025-09-07 14:34:23][352660830063181][976 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:34:23][352660830063181][976 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830063181\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8799\"}'\'' -e'"" [2025-09-07 14:34:26][352660830063181][4381 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5551aaa-5091-4345-b678-4b74f7f8bdf4","id":"QR_f5551aaa-5091-4345-b678-4b74f7f8bdf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:34:26][352660830063181][4537 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-07 14:34:26][352660830063181][4537 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-07 14:34:26][352660830063181][4537 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:34:28][352660830063181][0 ms][INFO] === Request start === [2025-09-07 14:34:28][352660830063181][1 ms][DEBUG] START check_scloud [2025-09-07 14:34:28][352660830063181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:34:29][352660830063181][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 1659 20741 24562376 184440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:34:29][352660830063181][272 ms][DEBUG] targetPkg: running [2025-09-07 14:34:29][352660830063181][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-07 14:34:29][352660830063181][272 ms][DEBUG] START check_boot_completed [2025-09-07 14:34:29][352660830063181][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:34:29][352660830063181][318 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:34:29][352660830063181][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:34:29][352660830063181][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:34:29][352660830063181][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:34:29][352660830063181][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:34:29][352660830063181][475 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1108\nsuccessfulTxPacketsPerSecond: 0.590158898262265\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.18998265902963327\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.49314647663011185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:34:29][352660830063181][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:34:29][352660830063181][818 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.329/227.329/227.329/0.000 ms\n [2025-09-07 14:34:29][352660830063181][819 ms][DEBUG] check_internet: online [2025-09-07 14:34:29][352660830063181][819 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:34:29][352660830063181][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830063181\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1475\"}'\'' -e'"" [2025-09-07 14:34:29][352660830063181][819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:34:29][352660830063181][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830063181\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1475\"}'\'' -e'"" [2025-09-07 14:34:34][352660830063181][5489 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4e9787a-e5ea-4eeb-b40a-49ed1b3daaf6","id":"QR_f4e9787a-e5ea-4eeb-b40a-49ed1b3daaf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:34:34][352660830063181][5645 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-07 14:34:34][352660830063181][5645 ms][DEBUG] END runCmdUntilRes#1 in 4826 ms [2025-09-07 14:34:34][352660830063181][5645 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:35:04][351240642051533][1 ms][INFO] === Request start === [2025-09-07 14:35:04][351240642051533][1 ms][DEBUG] START check_scloud [2025-09-07 14:35:04][351240642051533][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:35:04][351240642051533][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 1659 20741 24652672 195752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:35:04][351240642051533][312 ms][DEBUG] targetPkg: running [2025-09-07 14:35:04][351240642051533][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 14:35:04][351240642051533][312 ms][DEBUG] START check_boot_completed [2025-09-07 14:35:04][351240642051533][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:35:04][351240642051533][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:35:04][351240642051533][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:35:04][351240642051533][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:35:04][351240642051533][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:35:04][351240642051533][390 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:35:04][351240642051533][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642051533\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8298\"}'\'' -e'"" [2025-09-07 14:35:04][351240642051533][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:35:04][351240642051533][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642051533\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8298\"}'\'' -e'"" [2025-09-07 14:35:08][351240642051533][3795 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf3d1d37-3951-4ec7-8c3b-35bdb4e6927c","id":"QR_bf3d1d37-3951-4ec7-8c3b-35bdb4e6927c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:35:08][351240642051533][3951 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-07 14:35:08][351240642051533][3951 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-07 14:35:08][351240642051533][3952 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:35:10][351240642051533][0 ms][INFO] === Request start === [2025-09-07 14:35:10][351240642051533][1 ms][DEBUG] START check_scloud [2025-09-07 14:35:10][351240642051533][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:35:10][351240642051533][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 1659 20741 24825864 207712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:35:10][351240642051533][320 ms][DEBUG] targetPkg: running [2025-09-07 14:35:10][351240642051533][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 14:35:10][351240642051533][320 ms][DEBUG] START check_boot_completed [2025-09-07 14:35:10][351240642051533][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:35:10][351240642051533][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:35:10][351240642051533][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:35:10][351240642051533][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:35:10][351240642051533][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:35:10][351240642051533][413 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:35:10][351240642051533][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642051533\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5720\"}'\'' -e'"" [2025-09-07 14:35:10][351240642051533][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:35:10][351240642051533][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642051533\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5720\"}'\'' -e'"" [2025-09-07 14:35:15][351240642051533][5350 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ea6ce79-04be-4970-95fb-2c3083ef74ce","id":"QR_1ea6ce79-04be-4970-95fb-2c3083ef74ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:35:16][351240642051533][5506 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 14:35:16][351240642051533][5506 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 14:35:16][351240642051533][5506 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:35:20][352677531364932][0 ms][INFO] === Request start === [2025-09-07 14:35:20][352677531364932][1 ms][DEBUG] START check_scloud [2025-09-07 14:35:20][352677531364932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:35:20][352677531364932][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 1659 20741 25003152 218352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:35:20][352677531364932][268 ms][DEBUG] targetPkg: running [2025-09-07 14:35:20][352677531364932][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-07 14:35:20][352677531364932][268 ms][DEBUG] START check_boot_completed [2025-09-07 14:35:20][352677531364932][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:35:20][352677531364932][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:35:20][352677531364932][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:35:20][352677531364932][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:35:20][352677531364932][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:35:20][352677531364932][362 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:35:20][352677531364932][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531364932\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-09-07 14:35:20][352677531364932][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:35:20][352677531364932][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531364932\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-09-07 14:35:25][352677531364932][4923 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95d9299e-cd7f-4a0b-8d8e-0128562c6229","id":"QR_95d9299e-cd7f-4a0b-8d8e-0128562c6229","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:35:25][352677531364932][5079 ms][DEBUG] proc_open done in 4718 ms; code=255; res.len=3343 [2025-09-07 14:35:25][352677531364932][5079 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-07 14:35:25][352677531364932][5080 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:35:27][352677531364932][0 ms][INFO] === Request start === [2025-09-07 14:35:27][352677531364932][1 ms][DEBUG] START check_scloud [2025-09-07 14:35:27][352677531364932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:35:28][352677531364932][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 1659 20741 25162100 229996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:35:28][352677531364932][256 ms][DEBUG] targetPkg: running [2025-09-07 14:35:28][352677531364932][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-07 14:35:28][352677531364932][256 ms][DEBUG] START check_boot_completed [2025-09-07 14:35:28][352677531364932][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:35:28][352677531364932][302 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:35:28][352677531364932][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:35:28][352677531364932][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:35:28][352677531364932][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:35:28][352677531364932][349 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:35:28][352677531364932][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531364932\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1831\"}'\'' -e'"" [2025-09-07 14:35:28][352677531364932][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:35:28][352677531364932][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531364932\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1831\"}'\'' -e'"" [2025-09-07 14:35:33][352677531364932][5301 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9e21faf-66d5-4c96-84c6-3f1891d92abc","id":"QR_a9e21faf-66d5-4c96-84c6-3f1891d92abc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:35:33][352677531364932][5457 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-07 14:35:33][352677531364932][5457 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-07 14:35:33][352677531364932][5458 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:36:03][358697430517822][0 ms][INFO] === Request start === [2025-09-07 14:36:03][358697430517822][1 ms][DEBUG] START check_scloud [2025-09-07 14:36:03][358697430517822][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:36:04][358697430517822][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 1659 20741 25259408 242004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:36:04][358697430517822][259 ms][DEBUG] targetPkg: running [2025-09-07 14:36:04][358697430517822][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-07 14:36:04][358697430517822][259 ms][DEBUG] START check_boot_completed [2025-09-07 14:36:04][358697430517822][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:36:04][358697430517822][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:36:04][358697430517822][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:36:04][358697430517822][354 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 14:36:04][358697430517822][354 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 14:36:04][358697430517822][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:36:04][358697430517822][493 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1108\nsuccessfulTxPacketsPerSecond: 0.590158898262265\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.18998265902963327\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.49314647663011185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:36:04][358697430517822][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:36:05][358697430517822][1837 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.256/305.256/305.256/0.000 ms\n [2025-09-07 14:36:05][358697430517822][1837 ms][DEBUG] check_internet: online [2025-09-07 14:36:05][358697430517822][1837 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:36:05][358697430517822][1837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430517822\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3510\"}'\'' -e'"" [2025-09-07 14:36:05][358697430517822][1837 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:36:05][358697430517822][1837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430517822\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3510\"}'\'' -e'"" [2025-09-07 14:36:09][358697430517822][5695 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-07 14:36:09][358697430517822][5695 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-07 14:36:09][358697430517822][5695 ms][WARN] Detected error: Process with pid 1659 either refused to load frida-agent, or terminated during injectionProcess with pid 1659 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 14:36:09][358697430517822][5695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 14:36:09][358697430517822][5945 ms][DEBUG] SU: done in 250 ms; outsystem 21081 20741 12987300 258696 ep_poll 0 S system_server\n [2025-09-07 14:36:09][358697430517822][5945 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 14:36:09][358697430517822][6086 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 14:36:09][358697430517822][6086 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 14:36:09][358697430517822][6086 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:36:10][358697430517822][6226 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 14:36:10][358697430517822][6227 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:36:10][358697430517822][6398 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 14:36:12][358697430517822][8413 ms][DEBUG] START check_boot_completed [2025-09-07 14:36:12][358697430517822][8413 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:36:12][358697430517822][8460 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:36:12][358697430517822][8460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:36:12][358697430517822][8507 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:36:12][358697430517822][8507 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:36:15][358697430517822][11522 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 14:36:15][358697430517822][11522 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430517822\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3510\"}'\'' -e'"" [2025-09-07 14:36:18][358697430517822][14927 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0911cf9f-5830-43bb-9868-744ec27fa921","id":"QR_0911cf9f-5830-43bb-9868-744ec27fa921","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:36:18][358697430517822][15084 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=3343 [2025-09-07 14:36:18][358697430517822][15084 ms][DEBUG] END runCmdUntilRes#2 in 3562 ms [2025-09-07 14:36:18][358697430517822][15084 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:36:21][358697430517822][0 ms][INFO] === Request start === [2025-09-07 14:36:21][358697430517822][1 ms][DEBUG] START check_scloud [2025-09-07 14:36:21][358697430517822][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:36:21][358697430517822][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 3119 20741 23895040 125224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:36:21][358697430517822][259 ms][DEBUG] targetPkg: running [2025-09-07 14:36:21][358697430517822][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 14:36:21][358697430517822][259 ms][DEBUG] START check_boot_completed [2025-09-07 14:36:21][358697430517822][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:36:21][358697430517822][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:36:21][358697430517822][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:36:21][358697430517822][338 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 14:36:21][358697430517822][338 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 14:36:21][358697430517822][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:36:21][358697430517822][462 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1108\nsuccessfulTxPacketsPerSecond: 0.590158898262265\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.18998265902963327\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.49314647663011185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:36:21][358697430517822][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:36:22][358697430517822][790 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.286/227.286/227.286/0.000 ms\n [2025-09-07 14:36:22][358697430517822][790 ms][DEBUG] check_internet: online [2025-09-07 14:36:22][358697430517822][790 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:36:22][358697430517822][791 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430517822\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8249\"}'\'' -e'"" [2025-09-07 14:36:22][358697430517822][791 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:36:22][358697430517822][791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430517822\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8249\"}'\'' -e'"" [2025-09-07 14:36:27][358697430517822][5758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db744b63-2db3-4c2d-9159-c7ca19fdfc5e","id":"QR_db744b63-2db3-4c2d-9159-c7ca19fdfc5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:36:27][358697430517822][5914 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-09-07 14:36:27][358697430517822][5914 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-09-07 14:36:27][358697430517822][5914 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:37:04][355908101563109][0 ms][INFO] === Request start === [2025-09-07 14:37:04][355908101563109][1 ms][DEBUG] START check_scloud [2025-09-07 14:37:04][355908101563109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:37:05][355908101563109][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 3119 20741 23963196 139184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:37:05][355908101563109][309 ms][DEBUG] targetPkg: running [2025-09-07 14:37:05][355908101563109][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 14:37:05][355908101563109][309 ms][DEBUG] START check_boot_completed [2025-09-07 14:37:05][355908101563109][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:37:05][355908101563109][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:37:05][355908101563109][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:37:05][355908101563109][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:37:05][355908101563109][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:37:05][355908101563109][403 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:37:05][355908101563109][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908101563109\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1786\"}'\'' -e'"" [2025-09-07 14:37:05][355908101563109][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:37:05][355908101563109][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908101563109\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1786\"}'\'' -e'"" [2025-09-07 14:37:11][355908101563109][6136 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60b7be13-89b7-4ccb-b2ec-58df079faaa7","id":"QR_60b7be13-89b7-4ccb-b2ec-58df079faaa7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:37:11][355908101563109][6292 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-09-07 14:37:11][355908101563109][6292 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-09-07 14:37:11][355908101563109][6292 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:37:14][355908101563109][1 ms][INFO] === Request start === [2025-09-07 14:37:14][355908101563109][1 ms][DEBUG] START check_scloud [2025-09-07 14:37:14][355908101563109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:37:15][355908101563109][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 3119 20741 24109636 150140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:37:15][355908101563109][304 ms][DEBUG] targetPkg: running [2025-09-07 14:37:15][355908101563109][304 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 14:37:15][355908101563109][304 ms][DEBUG] START check_boot_completed [2025-09-07 14:37:15][355908101563109][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:37:15][355908101563109][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:37:15][355908101563109][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:37:15][355908101563109][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:37:15][355908101563109][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:37:15][355908101563109][397 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:37:15][355908101563109][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908101563109\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4985\"}'\'' -e'"" [2025-09-07 14:37:15][355908101563109][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:37:15][355908101563109][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908101563109\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4985\"}'\'' -e'"" [2025-09-07 14:37:19][355908101563109][4490 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b7f21dd-90df-4dbc-a1ab-a9395b45eec5","id":"QR_7b7f21dd-90df-4dbc-a1ab-a9395b45eec5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:37:19][355908101563109][4646 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-09-07 14:37:19][355908101563109][4646 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-07 14:37:19][355908101563109][4646 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:42:05][357651711947126][1 ms][INFO] === Request start === [2025-09-07 14:42:05][357651711947126][1 ms][DEBUG] START check_scloud [2025-09-07 14:42:05][357651711947126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:42:05][357651711947126][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 3119 20741 24250004 162232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:42:05][357651711947126][329 ms][DEBUG] targetPkg: running [2025-09-07 14:42:05][357651711947126][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-07 14:42:05][357651711947126][329 ms][DEBUG] START check_boot_completed [2025-09-07 14:42:05][357651711947126][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:42:05][357651711947126][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:42:05][357651711947126][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:42:05][357651711947126][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:42:05][357651711947126][408 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 14:42:05][357651711947126][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:42:05][357651711947126][548 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1498\nsuccessfulTxPacketsPerSecond: 0.0230100170274126\nretriedTxPackets: 357\nretriedTxPacketsPerSecond: 0.015340011351608401\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1426\nsuccessfulRxPacketsPerSecond: 0.038350028379021\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:42:05][357651711947126][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:42:07][357651711947126][1923 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.072/301.072/301.072/0.000 ms\n [2025-09-07 14:42:07][357651711947126][1923 ms][DEBUG] check_internet: online [2025-09-07 14:42:07][357651711947126][1923 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:42:07][357651711947126][1923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651711947126\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8933\"}'\'' -e'"" [2025-09-07 14:42:07][357651711947126][1923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:42:07][357651711947126][1923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651711947126\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8933\"}'\'' -e'"" [2025-09-07 14:42:12][357651711947126][7281 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bc43458-6af5-4f71-8e02-b48088a9a9e2","id":"QR_4bc43458-6af5-4f71-8e02-b48088a9a9e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:42:12][357651711947126][7437 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 14:42:12][357651711947126][7437 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 14:42:12][357651711947126][7437 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:42:16][357651711947126][0 ms][INFO] === Request start === [2025-09-07 14:42:16][357651711947126][1 ms][DEBUG] START check_scloud [2025-09-07 14:42:16][357651711947126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:42:16][357651711947126][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 3119 20741 24392604 172892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:42:16][357651711947126][311 ms][DEBUG] targetPkg: running [2025-09-07 14:42:16][357651711947126][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 14:42:16][357651711947126][311 ms][DEBUG] START check_boot_completed [2025-09-07 14:42:16][357651711947126][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:42:16][357651711947126][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:42:16][357651711947126][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:42:16][357651711947126][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:42:16][357651711947126][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:42:16][357651711947126][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:42:16][357651711947126][513 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1498\nsuccessfulTxPacketsPerSecond: 0.0230100170274126\nretriedTxPackets: 357\nretriedTxPacketsPerSecond: 0.015340011351608401\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1426\nsuccessfulRxPacketsPerSecond: 0.038350028379021\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:42:16][357651711947126][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:42:17][357651711947126][920 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.786/297.786/297.786/0.000 ms\n [2025-09-07 14:42:17][357651711947126][920 ms][DEBUG] check_internet: online [2025-09-07 14:42:17][357651711947126][920 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:42:17][357651711947126][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651711947126\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6373\"}'\'' -e'"" [2025-09-07 14:42:17][357651711947126][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:42:17][357651711947126][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651711947126\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6373\"}'\'' -e'"" [2025-09-07 14:42:21][357651711947126][4809 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67c6e4f7-be40-4d07-983b-e982420406b0","id":"QR_67c6e4f7-be40-4d07-983b-e982420406b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:42:21][357651711947126][4966 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-07 14:42:21][357651711947126][4966 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-07 14:42:21][357651711947126][4966 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:43:03][357962508842671][0 ms][INFO] === Request start === [2025-09-07 14:43:03][357962508842671][1 ms][DEBUG] START check_scloud [2025-09-07 14:43:03][357962508842671][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:43:03][357962508842671][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 3119 20741 24524892 182664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:43:03][357962508842671][319 ms][DEBUG] targetPkg: running [2025-09-07 14:43:03][357962508842671][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 14:43:03][357962508842671][319 ms][DEBUG] START check_boot_completed [2025-09-07 14:43:03][357962508842671][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:43:03][357962508842671][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:43:03][357962508842671][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:43:03][357962508842671][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:43:03][357962508842671][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:43:03][357962508842671][429 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:43:03][357962508842671][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508842671\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-09-07 14:43:03][357962508842671][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:43:03][357962508842671][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508842671\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-09-07 14:43:07][357962508842671][3849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adfd4907-9273-44ae-a2b3-60572f9434de","id":"QR_adfd4907-9273-44ae-a2b3-60572f9434de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:43:07][357962508842671][4006 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-09-07 14:43:07][357962508842671][4006 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-07 14:43:07][357962508842671][4006 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:43:09][357962508842671][0 ms][INFO] === Request start === [2025-09-07 14:43:09][357962508842671][1 ms][DEBUG] START check_scloud [2025-09-07 14:43:09][357962508842671][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:43:09][357962508842671][250 ms][DEBUG] SU: done in 250 ms; outu0_a118 3119 20741 24683876 193736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:43:09][357962508842671][250 ms][DEBUG] targetPkg: running [2025-09-07 14:43:09][357962508842671][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-07 14:43:09][357962508842671][251 ms][DEBUG] START check_boot_completed [2025-09-07 14:43:09][357962508842671][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:43:09][357962508842671][297 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:43:09][357962508842671][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:43:09][357962508842671][345 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 14:43:09][357962508842671][345 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 14:43:09][357962508842671][345 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:43:09][357962508842671][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508842671\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3512\"}'\'' -e'"" [2025-09-07 14:43:09][357962508842671][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:43:09][357962508842671][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508842671\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3512\"}'\'' -e'"" [2025-09-07 14:43:15][357962508842671][6311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71955c4d-6add-482b-9d6f-c4f42863f142","id":"QR_71955c4d-6add-482b-9d6f-c4f42863f142","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:43:16][357962508842671][6467 ms][DEBUG] proc_open done in 6122 ms; code=255; res.len=3343 [2025-09-07 14:43:16][357962508842671][6468 ms][DEBUG] END runCmdUntilRes#1 in 6122 ms [2025-09-07 14:43:16][357962508842671][6468 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:50:04][351978520945496][1 ms][INFO] === Request start === [2025-09-07 14:50:04][351978520945496][1 ms][DEBUG] START check_scloud [2025-09-07 14:50:04][351978520945496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:50:04][351978520945496][323 ms][DEBUG] SU: done in 321 ms; outu0_a118 3119 20741 24778200 205368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:50:04][351978520945496][323 ms][DEBUG] targetPkg: running [2025-09-07 14:50:04][351978520945496][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 14:50:04][351978520945496][323 ms][DEBUG] START check_boot_completed [2025-09-07 14:50:04][351978520945496][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:50:04][351978520945496][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:50:04][351978520945496][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:50:04][351978520945496][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 14:50:04][351978520945496][402 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 14:50:04][351978520945496][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:50:04][351978520945496][557 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1620\nsuccessfulTxPacketsPerSecond: 0.4047790470439517\nretriedTxPackets: 399\nretriedTxPacketsPerSecond: 0.13935016373644238\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1525\nsuccessfulRxPacketsPerSecond: 0.3284682430930428\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:50:04][351978520945496][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:50:06][351978520945496][2400 ms][DEBUG] SU: done in 1843 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.560/306.560/306.560/0.000 ms\n [2025-09-07 14:50:06][351978520945496][2400 ms][DEBUG] check_internet: online [2025-09-07 14:50:06][351978520945496][2401 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:50:06][351978520945496][2401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520945496\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7847\"}'\'' -e'"" [2025-09-07 14:50:06][351978520945496][2401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:50:06][351978520945496][2401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520945496\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7847\"}'\'' -e'"" [2025-09-07 14:50:10][351978520945496][6493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82a614c6-a1c2-4416-a3ba-76059c190262","id":"QR_82a614c6-a1c2-4416-a3ba-76059c190262","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:50:10][351978520945496][6649 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-07 14:50:10][351978520945496][6649 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-07 14:50:10][351978520945496][6649 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:50:13][351978520945496][0 ms][INFO] === Request start === [2025-09-07 14:50:13][351978520945496][1 ms][DEBUG] START check_scloud [2025-09-07 14:50:13][351978520945496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:50:13][351978520945496][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 3119 20741 24923948 212500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:50:13][351978520945496][301 ms][DEBUG] targetPkg: running [2025-09-07 14:50:13][351978520945496][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 14:50:13][351978520945496][301 ms][DEBUG] START check_boot_completed [2025-09-07 14:50:13][351978520945496][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:50:13][351978520945496][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:50:13][351978520945496][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:50:13][351978520945496][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:50:13][351978520945496][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:50:13][351978520945496][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:50:13][351978520945496][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1428828 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1642\nsuccessfulTxPacketsPerSecond: 0.07307901834947715\nretriedTxPackets: 413\nretriedTxPacketsPerSecond: 0.04650482985875819\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1538\nsuccessfulRxPacketsPerSecond: 0.04318305629741832\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:50:13][351978520945496][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:50:13][351978520945496][910 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.420/287.420/287.420/0.000 ms\n [2025-09-07 14:50:13][351978520945496][910 ms][DEBUG] check_internet: online [2025-09-07 14:50:13][351978520945496][910 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:50:13][351978520945496][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520945496\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6663\"}'\'' -e'"" [2025-09-07 14:50:13][351978520945496][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:50:13][351978520945496][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520945496\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6663\"}'\'' -e'"" [2025-09-07 14:50:19][351978520945496][6065 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e825378-cb71-4d84-9f08-57ac32533f52","id":"QR_7e825378-cb71-4d84-9f08-57ac32533f52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:50:19][351978520945496][6221 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 14:50:19][351978520945496][6221 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 14:50:19][351978520945496][6222 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:53:03][353475128391379][1 ms][INFO] === Request start === [2025-09-07 14:53:03][353475128391379][1 ms][DEBUG] START check_scloud [2025-09-07 14:53:03][353475128391379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:53:03][353475128391379][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 3119 20741 25071596 187920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:53:03][353475128391379][319 ms][DEBUG] targetPkg: running [2025-09-07 14:53:03][353475128391379][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 14:53:03][353475128391379][319 ms][DEBUG] START check_boot_completed [2025-09-07 14:53:03][353475128391379][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:53:03][353475128391379][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:53:03][353475128391379][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:53:03][353475128391379][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:53:03][353475128391379][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 14:53:03][353475128391379][397 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:53:03][353475128391379][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475128391379\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5453\"}'\'' -e'"" [2025-09-07 14:53:03][353475128391379][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:53:03][353475128391379][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475128391379\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5453\"}'\'' -e'"" [2025-09-07 14:53:09][353475128391379][5942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67f4c4ab-b834-4589-b002-c857a4e72897","id":"QR_67f4c4ab-b834-4589-b002-c857a4e72897","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:53:09][353475128391379][6099 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-09-07 14:53:09][353475128391379][6099 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-09-07 14:53:09][353475128391379][6099 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:53:11][353475128391379][0 ms][INFO] === Request start === [2025-09-07 14:53:11][353475128391379][1 ms][DEBUG] START check_scloud [2025-09-07 14:53:11][353475128391379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:53:12][353475128391379][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 3119 20741 25253108 194824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:53:12][353475128391379][297 ms][DEBUG] targetPkg: running [2025-09-07 14:53:12][353475128391379][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 14:53:12][353475128391379][297 ms][DEBUG] START check_boot_completed [2025-09-07 14:53:12][353475128391379][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:53:12][353475128391379][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:53:12][353475128391379][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:53:12][353475128391379][406 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:53:12][353475128391379][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:53:12][353475128391379][406 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:53:12][353475128391379][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475128391379\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2595\"}'\'' -e'"" [2025-09-07 14:53:12][353475128391379][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:53:12][353475128391379][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475128391379\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2595\"}'\'' -e'"" [2025-09-07 14:53:20][353475128391379][8701 ms][DEBUG] proc_open done in 8294 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-07 14:53:20][353475128391379][8701 ms][DEBUG] END runCmdUntilRes#1 in 8294 ms [2025-09-07 14:53:20][353475128391379][8701 ms][WARN] Detected error: Process with pid 3119 either refused to load frida-agent, or terminated during injectionProcess with pid 3119 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 14:53:20][353475128391379][8701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 14:53:20][353475128391379][9076 ms][DEBUG] SU: done in 375 ms; out [2025-09-07 14:53:20][353475128391379][9076 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 14:53:21][353475128391379][9357 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 14:53:21][353475128391379][9357 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 14:53:21][353475128391379][9357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:53:21][353475128391379][9622 ms][DEBUG] SU: done in 265 ms; out [2025-09-07 14:53:21][353475128391379][9622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:53:21][353475128391379][9825 ms][DEBUG] SU: done in 203 ms; out [2025-09-07 14:53:23][353475128391379][11840 ms][DEBUG] START check_boot_completed [2025-09-07 14:53:23][353475128391379][11840 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:53:23][353475128391379][11887 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:53:23][353475128391379][11887 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:53:23][353475128391379][11934 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:53:23][353475128391379][11934 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:53:26][353475128391379][14949 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 14:53:26][353475128391379][14949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475128391379\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2595\"}'\'' -e'"" [2025-09-07 14:53:28][353475128391379][16371 ms][DEBUG] proc_open done in 1422 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 14:53:28][353475128391379][16371 ms][DEBUG] END runCmdUntilRes#2 in 1422 ms [2025-09-07 14:53:28][353475128391379][16371 ms][WARN] Detected error 2; Reboot the device [2025-09-07 14:53:28][353475128391379][16371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 14:53:28][353475128391379][16636 ms][DEBUG] SU: done in 265 ms; outsystem 5814 5461 7273604 122892 0 0 R system_server\n [2025-09-07 14:53:28][353475128391379][16636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 14:53:29][353475128391379][17277 ms][DEBUG] SU: done in 640 ms; out [2025-09-07 14:54:03][351786691343791][0 ms][INFO] === Request start === [2025-09-07 14:54:03][351786691343791][1 ms][DEBUG] START check_scloud [2025-09-07 14:54:03][351786691343791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:54:03][351786691343791][36 ms][DEBUG] SU: done in 35 ms; out [2025-09-07 14:54:03][351786691343791][36 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 14:54:03][351786691343791][67 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 14:54:03][351786691343791][67 ms][WARN] check_devices: no device [2025-09-07 14:54:03][351786691343791][67 ms][WARN] check_devices: no device [2025-09-07 14:54:03][351786691343791][67 ms][DEBUG] END check_scloud in 67 ms [2025-09-07 14:54:07][357962509537510][0 ms][INFO] === Request start === [2025-09-07 14:54:07][357962509537510][1 ms][DEBUG] START check_scloud [2025-09-07 14:54:07][357962509537510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:54:07][357962509537510][36 ms][DEBUG] SU: done in 35 ms; out [2025-09-07 14:54:07][357962509537510][36 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 14:54:07][357962509537510][67 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 14:54:07][357962509537510][67 ms][WARN] check_devices: no device [2025-09-07 14:54:07][357962509537510][67 ms][WARN] check_devices: no device [2025-09-07 14:54:07][357962509537510][67 ms][DEBUG] END check_scloud in 66 ms [2025-09-07 14:55:03][351786691343791][1 ms][INFO] === Request start === [2025-09-07 14:55:03][351786691343791][1 ms][DEBUG] START check_scloud [2025-09-07 14:55:03][351786691343791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:55:04][351786691343791][390 ms][DEBUG] SU: done in 389 ms; out [2025-09-07 14:55:04][351786691343791][390 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 14:55:04][351786691343791][437 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 14:55:04][351786691343791][437 ms][DEBUG] check_devices: device found [2025-09-07 14:55:04][351786691343791][437 ms][WARN] targetPkg: not running, restarting [2025-09-07 14:55:04][351786691343791][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 14:55:04][351786691343791][563 ms][DEBUG] SU: done in 126 ms; out [2025-09-07 14:55:04][351786691343791][563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 14:55:04][351786691343791][812 ms][DEBUG] SU: done in 249 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 14:55:06][351786691343791][2826 ms][DEBUG] END check_scloud in 2825 ms [2025-09-07 14:55:06][351786691343791][2827 ms][DEBUG] START check_boot_completed [2025-09-07 14:55:06][351786691343791][2827 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:55:06][351786691343791][2874 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:55:06][351786691343791][2874 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:55:06][351786691343791][2936 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:55:06][351786691343791][2936 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 14:55:06][351786691343791][2936 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:55:06][351786691343791][2937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691343791\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8582\"}'\'' -e'"" [2025-09-07 14:55:06][351786691343791][2937 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:55:06][351786691343791][2937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691343791\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8582\"}'\'' -e'"" [2025-09-07 14:55:12][351786691343791][8997 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acefc154-c38d-465a-91b3-7796a6f3b728","id":"QR_acefc154-c38d-465a-91b3-7796a6f3b728","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:55:13][351786691343791][9153 ms][DEBUG] proc_open done in 6216 ms; code=255; res.len=3343 [2025-09-07 14:55:13][351786691343791][9153 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-09-07 14:55:13][351786691343791][9153 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:55:15][351786691343791][0 ms][INFO] === Request start === [2025-09-07 14:55:15][351786691343791][1 ms][DEBUG] START check_scloud [2025-09-07 14:55:15][351786691343791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:55:15][351786691343791][383 ms][DEBUG] SU: done in 382 ms; outu0_a118 10758 4972 23923172 116512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:55:15][351786691343791][383 ms][DEBUG] targetPkg: running [2025-09-07 14:55:15][351786691343791][383 ms][DEBUG] END check_scloud in 382 ms [2025-09-07 14:55:15][351786691343791][383 ms][DEBUG] START check_boot_completed [2025-09-07 14:55:15][351786691343791][383 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:55:15][351786691343791][414 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 14:55:15][351786691343791][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:55:16][351786691343791][477 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 14:55:16][351786691343791][477 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 14:55:16][351786691343791][477 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:55:16][351786691343791][477 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691343791\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-09-07 14:55:16][351786691343791][477 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:55:16][351786691343791][477 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786691343791\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-09-07 14:55:22][351786691343791][6553 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bfab0ff-89aa-4622-8b1f-165a80f469a2","id":"QR_1bfab0ff-89aa-4622-8b1f-165a80f469a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:55:22][351786691343791][6709 ms][DEBUG] proc_open done in 6232 ms; code=255; res.len=3343 [2025-09-07 14:55:22][351786691343791][6709 ms][DEBUG] END runCmdUntilRes#1 in 6232 ms [2025-09-07 14:55:22][351786691343791][6710 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:55:26][357962509537510][0 ms][INFO] === Request start === [2025-09-07 14:55:26][357962509537510][1 ms][DEBUG] START check_scloud [2025-09-07 14:55:26][357962509537510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:55:26][357962509537510][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 10758 4972 24083256 104712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:55:26][357962509537510][316 ms][DEBUG] targetPkg: running [2025-09-07 14:55:26][357962509537510][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 14:55:26][357962509537510][317 ms][DEBUG] START check_boot_completed [2025-09-07 14:55:26][357962509537510][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:55:26][357962509537510][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:55:26][357962509537510][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:55:26][357962509537510][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:55:26][357962509537510][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:55:26][357962509537510][409 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:55:26][357962509537510][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509537510\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4177\"}'\'' -e'"" [2025-09-07 14:55:26][357962509537510][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:55:26][357962509537510][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509537510\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4177\"}'\'' -e'"" [2025-09-07 14:55:31][357962509537510][4768 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_816b23e8-c7a9-4704-8d67-bbea187f8238","id":"QR_816b23e8-c7a9-4704-8d67-bbea187f8238","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:55:31][357962509537510][4924 ms][DEBUG] proc_open done in 4515 ms; code=255; res.len=3343 [2025-09-07 14:55:31][357962509537510][4924 ms][DEBUG] END runCmdUntilRes#1 in 4515 ms [2025-09-07 14:55:31][357962509537510][4924 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:55:33][357962509537510][0 ms][INFO] === Request start === [2025-09-07 14:55:33][357962509537510][1 ms][DEBUG] START check_scloud [2025-09-07 14:55:33][357962509537510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:55:34][357962509537510][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 10758 4972 24219740 102936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:55:34][357962509537510][300 ms][DEBUG] targetPkg: running [2025-09-07 14:55:34][357962509537510][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 14:55:34][357962509537510][301 ms][DEBUG] START check_boot_completed [2025-09-07 14:55:34][357962509537510][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:55:34][357962509537510][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:55:34][357962509537510][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:55:34][357962509537510][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:55:34][357962509537510][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:55:34][357962509537510][394 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:55:34][357962509537510][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509537510\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2130\"}'\'' -e'"" [2025-09-07 14:55:34][357962509537510][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:55:34][357962509537510][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509537510\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2130\"}'\'' -e'"" [2025-09-07 14:55:39][357962509537510][5533 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a31124a7-b1fa-4c86-9186-5fbd11d1bc48","id":"QR_a31124a7-b1fa-4c86-9186-5fbd11d1bc48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:55:39][357962509537510][5689 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 14:55:39][357962509537510][5689 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-07 14:55:39][357962509537510][5690 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:56:03][353310804018261][0 ms][INFO] === Request start === [2025-09-07 14:56:03][353310804018261][1 ms][DEBUG] START check_scloud [2025-09-07 14:56:03][353310804018261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:56:04][353310804018261][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 10758 4972 24281864 81172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:56:04][353310804018261][280 ms][DEBUG] targetPkg: running [2025-09-07 14:56:04][353310804018261][280 ms][DEBUG] END check_scloud in 280 ms [2025-09-07 14:56:04][353310804018261][280 ms][DEBUG] START check_boot_completed [2025-09-07 14:56:04][353310804018261][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:56:04][353310804018261][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:56:04][353310804018261][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:56:04][353310804018261][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:56:04][353310804018261][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 14:56:04][353310804018261][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:56:04][353310804018261][483 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 315\nsuccessfulTxPacketsPerSecond: 8.457015619614122\nretriedTxPackets: 53\nretriedTxPacketsPerSecond: 0.9379306663416157\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 298\nsuccessfulRxPacketsPerSecond: 5.720692929151414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:56:04][353310804018261][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:56:05][353310804018261][1420 ms][DEBUG] SU: done in 937 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.879/301.879/301.879/0.000 ms\n [2025-09-07 14:56:05][353310804018261][1421 ms][DEBUG] check_internet: online [2025-09-07 14:56:05][353310804018261][1421 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:56:05][353310804018261][1421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804018261\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8313\"}'\'' -e'"" [2025-09-07 14:56:05][353310804018261][1421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:56:05][353310804018261][1421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804018261\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8313\"}'\'' -e'"" [2025-09-07 14:56:09][353310804018261][5841 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efd218dd-12c6-41ed-b4f6-31bad0a89b54","id":"QR_efd218dd-12c6-41ed-b4f6-31bad0a89b54","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:56:09][353310804018261][5997 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-07 14:56:09][353310804018261][5997 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-09-07 14:56:09][353310804018261][5998 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:56:12][353310804018261][0 ms][INFO] === Request start === [2025-09-07 14:56:12][353310804018261][1 ms][DEBUG] START check_scloud [2025-09-07 14:56:12][353310804018261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:56:12][353310804018261][347 ms][DEBUG] SU: done in 346 ms; outu0_a118 10758 4972 24434064 97424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:56:12][353310804018261][347 ms][DEBUG] targetPkg: running [2025-09-07 14:56:12][353310804018261][347 ms][DEBUG] END check_scloud in 346 ms [2025-09-07 14:56:12][353310804018261][347 ms][DEBUG] START check_boot_completed [2025-09-07 14:56:12][353310804018261][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:56:12][353310804018261][394 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 14:56:12][353310804018261][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:56:12][353310804018261][442 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 14:56:12][353310804018261][443 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 14:56:12][353310804018261][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:56:12][353310804018261][566 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 315\nsuccessfulTxPacketsPerSecond: 8.457015619614122\nretriedTxPackets: 53\nretriedTxPacketsPerSecond: 0.9379306663416157\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 298\nsuccessfulRxPacketsPerSecond: 5.720692929151414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:56:12][353310804018261][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:56:13][353310804018261][1019 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=342 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 342.960/342.960/342.960/0.000 ms\n [2025-09-07 14:56:13][353310804018261][1019 ms][DEBUG] check_internet: online [2025-09-07 14:56:13][353310804018261][1019 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:56:13][353310804018261][1019 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804018261\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4987\"}'\'' -e'"" [2025-09-07 14:56:13][353310804018261][1019 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:56:13][353310804018261][1019 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804018261\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4987\"}'\'' -e'"" [2025-09-07 14:56:18][353310804018261][5861 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa4af2c4-c975-44ad-9d5c-f11bb5713387","id":"QR_aa4af2c4-c975-44ad-9d5c-f11bb5713387","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:56:18][353310804018261][6017 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-07 14:56:18][353310804018261][6017 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-07 14:56:18][353310804018261][6017 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:58:04][351007066229089][1 ms][INFO] === Request start === [2025-09-07 14:58:04][351007066229089][1 ms][DEBUG] START check_scloud [2025-09-07 14:58:04][351007066229089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:58:04][351007066229089][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 10758 4972 24520004 108488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:58:04][351007066229089][298 ms][DEBUG] targetPkg: running [2025-09-07 14:58:04][351007066229089][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 14:58:04][351007066229089][298 ms][DEBUG] START check_boot_completed [2025-09-07 14:58:04][351007066229089][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:58:04][351007066229089][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 14:58:04][351007066229089][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:58:05][351007066229089][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 14:58:05][351007066229089][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 14:58:05][351007066229089][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:58:05][351007066229089][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 315\nsuccessfulTxPacketsPerSecond: 8.457015619614122\nretriedTxPackets: 53\nretriedTxPacketsPerSecond: 0.9379306663416157\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 298\nsuccessfulRxPacketsPerSecond: 5.720692929151414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:58:05][351007066229089][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:58:05][351007066229089][954 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.154/309.154/309.154/0.000 ms\n [2025-09-07 14:58:05][351007066229089][954 ms][DEBUG] check_internet: online [2025-09-07 14:58:05][351007066229089][954 ms][DEBUG] rawBody.length=1160 [2025-09-07 14:58:05][351007066229089][954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066229089\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9737\"}'\'' -e'"" [2025-09-07 14:58:05][351007066229089][954 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:58:05][351007066229089][954 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066229089\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9737\"}'\'' -e'"" [2025-09-07 14:58:11][351007066229089][6921 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdd01222-0e8e-4af7-bd98-3989a6e22b5a","id":"QR_cdd01222-0e8e-4af7-bd98-3989a6e22b5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:58:11][351007066229089][7077 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-07 14:58:11][351007066229089][7077 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-07 14:58:11][351007066229089][7077 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 14:58:15][351007066229089][0 ms][INFO] === Request start === [2025-09-07 14:58:15][351007066229089][1 ms][DEBUG] START check_scloud [2025-09-07 14:58:15][351007066229089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 14:58:15][351007066229089][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 10758 4972 24675852 119184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 14:58:15][351007066229089][306 ms][DEBUG] targetPkg: running [2025-09-07 14:58:15][351007066229089][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 14:58:15][351007066229089][306 ms][DEBUG] START check_boot_completed [2025-09-07 14:58:15][351007066229089][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 14:58:15][351007066229089][335 ms][DEBUG] ADB: done in 29 ms; out [2025-09-07 14:58:15][351007066229089][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 14:58:15][351007066229089][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 14:58:15][351007066229089][382 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-07 14:58:15][351007066229089][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 14:58:15][351007066229089][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 315\nsuccessfulTxPacketsPerSecond: 8.457015619614122\nretriedTxPackets: 53\nretriedTxPacketsPerSecond: 0.9379306663416157\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 298\nsuccessfulRxPacketsPerSecond: 5.720692929151414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 14:58:15][351007066229089][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 14:58:16][351007066229089][913 ms][DEBUG] SU: done in 405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.426/287.426/287.426/0.000 ms\n [2025-09-07 14:58:16][351007066229089][913 ms][DEBUG] check_internet: online [2025-09-07 14:58:16][351007066229089][913 ms][DEBUG] rawBody.length=1150 [2025-09-07 14:58:16][351007066229089][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066229089\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1378\"}'\'' -e'"" [2025-09-07 14:58:16][351007066229089][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 14:58:16][351007066229089][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066229089\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1378\"}'\'' -e'"" [2025-09-07 14:58:20][351007066229089][4834 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_262e1f78-1e9b-46a0-8b6a-399780fb2621","id":"QR_262e1f78-1e9b-46a0-8b6a-399780fb2621","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 14:58:20][351007066229089][4990 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-07 14:58:20][351007066229089][4990 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-07 14:58:20][351007066229089][4990 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:00:04][358625332858283][0 ms][INFO] === Request start === [2025-09-07 15:00:04][358625332858283][1 ms][DEBUG] START check_scloud [2025-09-07 15:00:04][358625332858283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:00:04][358625332858283][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 10758 4972 24785612 127760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:00:04][358625332858283][313 ms][DEBUG] targetPkg: running [2025-09-07 15:00:04][358625332858283][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 15:00:04][358625332858283][313 ms][DEBUG] START check_boot_completed [2025-09-07 15:00:04][358625332858283][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:00:04][358625332858283][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:00:04][358625332858283][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:00:04][358625332858283][406 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 15:00:04][358625332858283][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:00:04][358625332858283][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:00:04][358625332858283][531 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1190\nsuccessfulTxPacketsPerSecond: 3.1885663476885626\nretriedTxPackets: 168\nretriedTxPacketsPerSecond: 0.4190687199819254\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1185\nsuccessfulRxPacketsPerSecond: 3.23229525759972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:00:04][358625332858283][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:00:05][358625332858283][984 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=347 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 347.628/347.628/347.628/0.000 ms\n [2025-09-07 15:00:05][358625332858283][984 ms][DEBUG] check_internet: online [2025-09-07 15:00:05][358625332858283][984 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:00:05][358625332858283][984 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358625332858283\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7849\"}'\'' -e'"" [2025-09-07 15:00:05][358625332858283][984 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:00:05][358625332858283][984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358625332858283\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7849\"}'\'' -e'"" [2025-09-07 15:00:09][358625332858283][5717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a79f5b8-9239-423a-b165-7a52f654e4b7","id":"QR_3a79f5b8-9239-423a-b165-7a52f654e4b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:00:10][358625332858283][5874 ms][DEBUG] proc_open done in 4890 ms; code=255; res.len=3343 [2025-09-07 15:00:10][358625332858283][5874 ms][DEBUG] END runCmdUntilRes#1 in 4890 ms [2025-09-07 15:00:10][358625332858283][5874 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:00:12][358625332858283][1 ms][INFO] === Request start === [2025-09-07 15:00:12][358625332858283][1 ms][DEBUG] START check_scloud [2025-09-07 15:00:12][358625332858283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:00:12][358625332858283][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 10758 4972 24944468 135056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:00:12][358625332858283][308 ms][DEBUG] targetPkg: running [2025-09-07 15:00:12][358625332858283][308 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 15:00:12][358625332858283][308 ms][DEBUG] START check_boot_completed [2025-09-07 15:00:12][358625332858283][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:00:12][358625332858283][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:00:12][358625332858283][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:00:12][358625332858283][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:00:12][358625332858283][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:00:12][358625332858283][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:00:12][358625332858283][497 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1190\nsuccessfulTxPacketsPerSecond: 3.1885663476885626\nretriedTxPackets: 168\nretriedTxPacketsPerSecond: 0.4190687199819254\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1185\nsuccessfulRxPacketsPerSecond: 3.23229525759972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:00:12][358625332858283][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:00:13][358625332858283][823 ms][DEBUG] SU: done in 326 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.709/224.709/224.709/0.000 ms\n [2025-09-07 15:00:13][358625332858283][823 ms][DEBUG] check_internet: online [2025-09-07 15:00:13][358625332858283][823 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:00:13][358625332858283][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358625332858283\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6410\"}'\'' -e'"" [2025-09-07 15:00:13][358625332858283][823 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:00:13][358625332858283][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358625332858283\",\"model\":\"SM-G998B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6410\"}'\'' -e'"" [2025-09-07 15:00:18][358625332858283][5962 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20641f58-65dd-4766-9a38-9c7b7ab544f9","id":"QR_20641f58-65dd-4766-9a38-9c7b7ab544f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:00:18][358625332858283][6118 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 15:00:18][358625332858283][6118 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-07 15:00:18][358625332858283][6118 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:04:04][352192667139116][1 ms][INFO] === Request start === [2025-09-07 15:04:04][352192667139116][1 ms][DEBUG] START check_scloud [2025-09-07 15:04:04][352192667139116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:04:04][352192667139116][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 10758 4972 25056148 145608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:04:04][352192667139116][316 ms][DEBUG] targetPkg: running [2025-09-07 15:04:04][352192667139116][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 15:04:04][352192667139116][316 ms][DEBUG] START check_boot_completed [2025-09-07 15:04:04][352192667139116][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:04:04][352192667139116][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:04:04][352192667139116][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:04:04][352192667139116][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:04:04][352192667139116][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:04:04][352192667139116][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:04:04][352192667139116][519 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1190\nsuccessfulTxPacketsPerSecond: 3.1885663476885626\nretriedTxPackets: 168\nretriedTxPacketsPerSecond: 0.4190687199819254\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1185\nsuccessfulRxPacketsPerSecond: 3.23229525759972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:04:04][352192667139116][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:04:05][352192667139116][1911 ms][DEBUG] SU: done in 1392 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.486/287.486/287.486/0.000 ms\n [2025-09-07 15:04:05][352192667139116][1911 ms][DEBUG] check_internet: online [2025-09-07 15:04:05][352192667139116][1911 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:04:05][352192667139116][1911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192667139116\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2056\"}'\'' -e'"" [2025-09-07 15:04:05][352192667139116][1911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:04:05][352192667139116][1911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192667139116\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2056\"}'\'' -e'"" [2025-09-07 15:04:09][352192667139116][5877 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1b56236-b047-4250-a6d0-1f7238c2faf1","id":"QR_c1b56236-b047-4250-a6d0-1f7238c2faf1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:04:10][352192667139116][6033 ms][DEBUG] proc_open done in 4121 ms; code=255; res.len=3343 [2025-09-07 15:04:10][352192667139116][6033 ms][DEBUG] END runCmdUntilRes#1 in 4122 ms [2025-09-07 15:04:10][352192667139116][6033 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:04:12][352192667139116][0 ms][INFO] === Request start === [2025-09-07 15:04:12][352192667139116][1 ms][DEBUG] START check_scloud [2025-09-07 15:04:12][352192667139116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:04:12][352192667139116][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 10758 4972 25223260 157424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:04:12][352192667139116][251 ms][DEBUG] targetPkg: running [2025-09-07 15:04:12][352192667139116][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-07 15:04:12][352192667139116][251 ms][DEBUG] START check_boot_completed [2025-09-07 15:04:12][352192667139116][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:04:12][352192667139116][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:04:12][352192667139116][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:04:12][352192667139116][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:04:12][352192667139116][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:04:12][352192667139116][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:04:12][352192667139116][454 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1190\nsuccessfulTxPacketsPerSecond: 3.1885663476885626\nretriedTxPackets: 168\nretriedTxPacketsPerSecond: 0.4190687199819254\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1185\nsuccessfulRxPacketsPerSecond: 3.23229525759972\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:04:12][352192667139116][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:04:13][352192667139116][813 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.531/227.531/227.531/0.000 ms\n [2025-09-07 15:04:13][352192667139116][814 ms][DEBUG] check_internet: online [2025-09-07 15:04:13][352192667139116][814 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:04:13][352192667139116][814 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192667139116\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6198\"}'\'' -e'"" [2025-09-07 15:04:13][352192667139116][814 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:04:13][352192667139116][814 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192667139116\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6198\"}'\'' -e'"" [2025-09-07 15:04:17][352192667139116][5218 ms][DEBUG] proc_open done in 4404 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 15:04:17][352192667139116][5218 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-09-07 15:04:17][352192667139116][5218 ms][WARN] Detected error: Process with pid 10758 either refused to load frida-agent, or terminated during injectionProcess with pid 10758 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 15:04:17][352192667139116][5218 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:04:17][352192667139116][5515 ms][DEBUG] SU: done in 296 ms; outsystem 5393 4972 13218948 592628 ep_poll 0 S system_server\n [2025-09-07 15:04:17][352192667139116][5515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 15:04:18][352192667139116][5655 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 15:04:18][352192667139116][5655 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 15:04:18][352192667139116][5656 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:04:18][352192667139116][5796 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 15:04:18][352192667139116][5796 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:04:18][352192667139116][5983 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 15:04:20][352192667139116][7998 ms][DEBUG] START check_boot_completed [2025-09-07 15:04:20][352192667139116][7998 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:04:20][352192667139116][8045 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:04:20][352192667139116][8046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:04:20][352192667139116][8108 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:04:20][352192667139116][8108 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:04:23][352192667139116][11123 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 15:04:23][352192667139116][11123 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192667139116\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6198\"}'\'' -e'"" [2025-09-07 15:04:28][352192667139116][16403 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5773eb92-b676-42bc-8ee5-b36eaa8752d5","id":"QR_5773eb92-b676-42bc-8ee5-b36eaa8752d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:04:29][352192667139116][16559 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-07 15:04:29][352192667139116][16559 ms][DEBUG] END runCmdUntilRes#2 in 5436 ms [2025-09-07 15:04:29][352192667139116][16559 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:05:03][354721983179758][0 ms][INFO] === Request start === [2025-09-07 15:05:03][354721983179758][1 ms][DEBUG] START check_scloud [2025-09-07 15:05:03][354721983179758][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:05:03][354721983179758][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18096 4972 23805212 127092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:05:03][354721983179758][306 ms][DEBUG] targetPkg: running [2025-09-07 15:05:03][354721983179758][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 15:05:03][354721983179758][306 ms][DEBUG] START check_boot_completed [2025-09-07 15:05:03][354721983179758][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:05:03][354721983179758][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:05:03][354721983179758][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:05:03][354721983179758][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:05:03][354721983179758][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:05:03][354721983179758][416 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:05:03][354721983179758][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721983179758\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1365\"}'\'' -e'"" [2025-09-07 15:05:03][354721983179758][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:05:03][354721983179758][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721983179758\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1365\"}'\'' -e'"" [2025-09-07 15:05:07][354721983179758][3790 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1a61428-8d12-4789-beb2-48ed22bc9bcc","id":"QR_b1a61428-8d12-4789-beb2-48ed22bc9bcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:05:07][354721983179758][3946 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-07 15:05:07][354721983179758][3946 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-07 15:05:07][354721983179758][3946 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:05:09][354721983179758][0 ms][INFO] === Request start === [2025-09-07 15:05:09][354721983179758][1 ms][DEBUG] START check_scloud [2025-09-07 15:05:09][354721983179758][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:05:10][354721983179758][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18096 4972 23962084 137872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:05:10][354721983179758][313 ms][DEBUG] targetPkg: running [2025-09-07 15:05:10][354721983179758][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 15:05:10][354721983179758][313 ms][DEBUG] START check_boot_completed [2025-09-07 15:05:10][354721983179758][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:05:10][354721983179758][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:05:10][354721983179758][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:05:10][354721983179758][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:05:10][354721983179758][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:05:10][354721983179758][407 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:05:10][354721983179758][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721983179758\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4377\"}'\'' -e'"" [2025-09-07 15:05:10][354721983179758][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:05:10][354721983179758][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721983179758\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4377\"}'\'' -e'"" [2025-09-07 15:05:14][354721983179758][5077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8770735-597d-495a-b712-9f51d5b7b6b0","id":"QR_b8770735-597d-495a-b712-9f51d5b7b6b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:05:15][354721983179758][5233 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-07 15:05:15][354721983179758][5233 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-07 15:05:15][354721983179758][5234 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:05:19][350013883058546][0 ms][INFO] === Request start === [2025-09-07 15:05:19][350013883058546][1 ms][DEBUG] START check_scloud [2025-09-07 15:05:19][350013883058546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:05:19][350013883058546][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 18096 4972 24098284 148696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:05:19][350013883058546][288 ms][DEBUG] targetPkg: running [2025-09-07 15:05:19][350013883058546][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 15:05:19][350013883058546][288 ms][DEBUG] START check_boot_completed [2025-09-07 15:05:19][350013883058546][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:05:19][350013883058546][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:05:19][350013883058546][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:05:19][350013883058546][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:05:19][350013883058546][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:05:19][350013883058546][381 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:05:19][350013883058546][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883058546\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9334\"}'\'' -e'"" [2025-09-07 15:05:19][350013883058546][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:05:19][350013883058546][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883058546\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9334\"}'\'' -e'"" [2025-09-07 15:05:24][350013883058546][5067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_459f5ed6-b291-4bfc-bb46-bb2fc0c5a586","id":"QR_459f5ed6-b291-4bfc-bb46-bb2fc0c5a586","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:05:24][350013883058546][5223 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-07 15:05:24][350013883058546][5223 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-07 15:05:24][350013883058546][5224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:05:26][350013883058546][0 ms][INFO] === Request start === [2025-09-07 15:05:26][350013883058546][1 ms][DEBUG] START check_scloud [2025-09-07 15:05:26][350013883058546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:05:27][350013883058546][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 18096 4972 24205456 159872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:05:27][350013883058546][306 ms][DEBUG] targetPkg: running [2025-09-07 15:05:27][350013883058546][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 15:05:27][350013883058546][306 ms][DEBUG] START check_boot_completed [2025-09-07 15:05:27][350013883058546][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:05:27][350013883058546][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:05:27][350013883058546][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:05:27][350013883058546][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:05:27][350013883058546][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 15:05:27][350013883058546][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:05:27][350013883058546][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883058546\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4197\"}'\'' -e'"" [2025-09-07 15:05:27][350013883058546][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:05:27][350013883058546][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883058546\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4197\"}'\'' -e'"" [2025-09-07 15:05:32][350013883058546][5351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_521e8aeb-c187-4656-a187-55a12d6719b5","id":"QR_521e8aeb-c187-4656-a187-55a12d6719b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:05:32][350013883058546][5507 ms][DEBUG] proc_open done in 5106 ms; code=255; res.len=3343 [2025-09-07 15:05:32][350013883058546][5507 ms][DEBUG] END runCmdUntilRes#1 in 5106 ms [2025-09-07 15:05:32][350013883058546][5507 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:10:03][350331801039574][1 ms][INFO] === Request start === [2025-09-07 15:10:03][350331801039574][1 ms][DEBUG] START check_scloud [2025-09-07 15:10:03][350331801039574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:10:04][350331801039574][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18096 4972 24310908 172176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:10:04][350331801039574][309 ms][DEBUG] targetPkg: running [2025-09-07 15:10:04][350331801039574][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 15:10:04][350331801039574][309 ms][DEBUG] START check_boot_completed [2025-09-07 15:10:04][350331801039574][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:10:04][350331801039574][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:10:04][350331801039574][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:10:04][350331801039574][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:10:04][350331801039574][388 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 15:10:04][350331801039574][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:10:04][350331801039574][512 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1529\nsuccessfulTxPacketsPerSecond: 0.4616636497998904\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.11956756397695004\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1481\nsuccessfulRxPacketsPerSecond: 0.425129116362489\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:10:04][350331801039574][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:10:05][350331801039574][1871 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.724/303.724/303.724/0.000 ms\n [2025-09-07 15:10:05][350331801039574][1871 ms][DEBUG] check_internet: online [2025-09-07 15:10:05][350331801039574][1871 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:10:05][350331801039574][1871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331801039574\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1300\"}'\'' -e'"" [2025-09-07 15:10:05][350331801039574][1871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:10:05][350331801039574][1871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331801039574\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1300\"}'\'' -e'"" [2025-09-07 15:10:09][350331801039574][5745 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20418e87-db5c-4818-8737-732f7ed82125","id":"QR_20418e87-db5c-4818-8737-732f7ed82125","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:10:09][350331801039574][5901 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-09-07 15:10:09][350331801039574][5901 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-07 15:10:09][350331801039574][5901 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:10:11][350331801039574][0 ms][INFO] === Request start === [2025-09-07 15:10:11][350331801039574][1 ms][DEBUG] START check_scloud [2025-09-07 15:10:11][350331801039574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:10:12][350331801039574][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 18096 4972 24446980 182676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:10:12][350331801039574][315 ms][DEBUG] targetPkg: running [2025-09-07 15:10:12][350331801039574][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 15:10:12][350331801039574][315 ms][DEBUG] START check_boot_completed [2025-09-07 15:10:12][350331801039574][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:10:12][350331801039574][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:10:12][350331801039574][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:10:12][350331801039574][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:10:12][350331801039574][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:10:12][350331801039574][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:10:12][350331801039574][518 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1529\nsuccessfulTxPacketsPerSecond: 0.4616636497998904\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.11956756397695004\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1481\nsuccessfulRxPacketsPerSecond: 0.425129116362489\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:10:12][350331801039574][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:10:12][350331801039574][940 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.854/319.854/319.854/0.000 ms\n [2025-09-07 15:10:12][350331801039574][940 ms][DEBUG] check_internet: online [2025-09-07 15:10:12][350331801039574][940 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:10:12][350331801039574][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331801039574\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-09-07 15:10:12][350331801039574][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:10:12][350331801039574][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331801039574\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-09-07 15:10:18][350331801039574][6095 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbe7ebbd-a555-49a7-9769-25b89e2193ce","id":"QR_cbe7ebbd-a555-49a7-9769-25b89e2193ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:10:18][350331801039574][6251 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 15:10:18][350331801039574][6251 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 15:10:18][350331801039574][6251 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:14:03][351978520620529][1 ms][INFO] === Request start === [2025-09-07 15:14:03][351978520620529][1 ms][DEBUG] START check_scloud [2025-09-07 15:14:03][351978520620529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:14:03][351978520620529][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 18096 4972 24589508 194776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:14:03][351978520620529][306 ms][DEBUG] targetPkg: running [2025-09-07 15:14:03][351978520620529][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 15:14:03][351978520620529][306 ms][DEBUG] START check_boot_completed [2025-09-07 15:14:03][351978520620529][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:14:03][351978520620529][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:14:03][351978520620529][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:14:03][351978520620529][401 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 15:14:03][351978520620529][401 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-07 15:14:03][351978520620529][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:14:04][351978520620529][542 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1609\nsuccessfulTxPacketsPerSecond: 0.6122339652098049\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.20662896325830915\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1548\nsuccessfulRxPacketsPerSecond: 0.5127459458632116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:14:04][351978520620529][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:14:04][351978520620529][901 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.885/251.885/251.885/0.000 ms\n [2025-09-07 15:14:04][351978520620529][901 ms][DEBUG] check_internet: online [2025-09-07 15:14:04][351978520620529][901 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:14:04][351978520620529][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520620529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-09-07 15:14:04][351978520620529][901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:14:04][351978520620529][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520620529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-09-07 15:14:09][351978520620529][6460 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f58b4d9d-868d-4471-bf51-5e8c4d96d84a","id":"QR_f58b4d9d-868d-4471-bf51-5e8c4d96d84a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:14:10][351978520620529][6616 ms][DEBUG] proc_open done in 5715 ms; code=255; res.len=3343 [2025-09-07 15:14:10][351978520620529][6617 ms][DEBUG] END runCmdUntilRes#1 in 5715 ms [2025-09-07 15:14:10][351978520620529][6617 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:14:12][351978520620529][0 ms][INFO] === Request start === [2025-09-07 15:14:12][351978520620529][1 ms][DEBUG] START check_scloud [2025-09-07 15:14:12][351978520620529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:14:12][351978520620529][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 18096 4972 24765772 191816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:14:12][351978520620529][319 ms][DEBUG] targetPkg: running [2025-09-07 15:14:12][351978520620529][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 15:14:12][351978520620529][319 ms][DEBUG] START check_boot_completed [2025-09-07 15:14:12][351978520620529][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:14:12][351978520620529][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:14:12][351978520620529][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:14:12][351978520620529][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:14:12][351978520620529][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:14:12][351978520620529][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:14:12][351978520620529][522 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1609\nsuccessfulTxPacketsPerSecond: 0.6122339652098049\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.20662896325830915\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1548\nsuccessfulRxPacketsPerSecond: 0.5127459458632116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:14:13][351978520620529][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:14:13][351978520620529][990 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=329 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 329.879/329.879/329.879/0.000 ms\n [2025-09-07 15:14:13][351978520620529][990 ms][DEBUG] check_internet: online [2025-09-07 15:14:13][351978520620529][990 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:14:13][351978520620529][990 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520620529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6509\"}'\'' -e'"" [2025-09-07 15:14:13][351978520620529][990 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:14:13][351978520620529][991 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520620529\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6509\"}'\'' -e'"" [2025-09-07 15:14:18][351978520620529][6051 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35188777-b72c-4484-94a9-2fe66492acec","id":"QR_35188777-b72c-4484-94a9-2fe66492acec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:14:18][351978520620529][6208 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 15:14:18][351978520620529][6208 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-07 15:14:18][351978520620529][6208 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:15:04][359232093723118][0 ms][INFO] === Request start === [2025-09-07 15:15:04][359232093723118][1 ms][DEBUG] START check_scloud [2025-09-07 15:15:04][359232093723118][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:15:04][359232093723118][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 18096 4972 24869260 203220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:15:04][359232093723118][300 ms][DEBUG] targetPkg: running [2025-09-07 15:15:04][359232093723118][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 15:15:04][359232093723118][300 ms][DEBUG] START check_boot_completed [2025-09-07 15:15:04][359232093723118][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:15:04][359232093723118][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:15:04][359232093723118][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:15:04][359232093723118][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:15:04][359232093723118][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:15:04][359232093723118][379 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:15:04][359232093723118][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359232093723118\",\"model\":\"SM-J810M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1735\"}'\'' -e'"" [2025-09-07 15:15:04][359232093723118][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:15:04][359232093723118][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359232093723118\",\"model\":\"SM-J810M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1735\"}'\'' -e'"" [2025-09-07 15:15:09][359232093723118][4987 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac7cc592-9329-4335-b428-f4b77cf4e2af","id":"QR_ac7cc592-9329-4335-b428-f4b77cf4e2af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:15:09][359232093723118][5143 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-07 15:15:09][359232093723118][5143 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-07 15:15:09][359232093723118][5143 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:15:13][359232093723118][0 ms][INFO] === Request start === [2025-09-07 15:15:13][359232093723118][1 ms][DEBUG] START check_scloud [2025-09-07 15:15:13][359232093723118][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:15:13][359232093723118][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 18096 4972 25036308 215116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:15:13][359232093723118][300 ms][DEBUG] targetPkg: running [2025-09-07 15:15:13][359232093723118][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 15:15:13][359232093723118][300 ms][DEBUG] START check_boot_completed [2025-09-07 15:15:13][359232093723118][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:15:13][359232093723118][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:15:13][359232093723118][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:15:13][359232093723118][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:15:13][359232093723118][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:15:13][359232093723118][409 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:15:13][359232093723118][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359232093723118\",\"model\":\"SM-J810M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4862\"}'\'' -e'"" [2025-09-07 15:15:13][359232093723118][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:15:13][359232093723118][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359232093723118\",\"model\":\"SM-J810M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4862\"}'\'' -e'"" [2025-09-07 15:15:18][359232093723118][5079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adf5d481-a0d4-4235-8505-f5368915fc45","id":"QR_adf5d481-a0d4-4235-8505-f5368915fc45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:15:18][359232093723118][5236 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-07 15:15:18][359232093723118][5236 ms][DEBUG] END runCmdUntilRes#1 in 4826 ms [2025-09-07 15:15:18][359232093723118][5236 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:15:20][350013883679549][0 ms][INFO] === Request start === [2025-09-07 15:15:20][350013883679549][1 ms][DEBUG] START check_scloud [2025-09-07 15:15:20][350013883679549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:15:20][350013883679549][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18096 4972 25213724 218376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:15:20][350013883679549][317 ms][DEBUG] targetPkg: running [2025-09-07 15:15:20][350013883679549][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 15:15:20][350013883679549][317 ms][DEBUG] START check_boot_completed [2025-09-07 15:15:20][350013883679549][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:15:20][350013883679549][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:15:20][350013883679549][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:15:20][350013883679549][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:15:20][350013883679549][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:15:20][350013883679549][426 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:15:20][350013883679549][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883679549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8808\"}'\'' -e'"" [2025-09-07 15:15:20][350013883679549][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:15:20][350013883679549][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883679549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8808\"}'\'' -e'"" [2025-09-07 15:15:24][350013883679549][4316 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 15:15:24][350013883679549][4316 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-07 15:15:24][350013883679549][4316 ms][WARN] Detected error: Process with pid 18096 either refused to load frida-agent, or terminated during injectionProcess with pid 18096 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 15:15:24][350013883679549][4316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:15:24][350013883679549][4566 ms][DEBUG] SU: done in 250 ms; outsystem 5393 4972 12830888 265684 ep_poll 0 S system_server\n [2025-09-07 15:15:24][350013883679549][4566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 15:15:24][350013883679549][4706 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 15:15:24][350013883679549][4706 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 15:15:24][350013883679549][4706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:15:25][350013883679549][4831 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 15:15:25][350013883679549][4831 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:15:25][350013883679549][5019 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 15:15:27][350013883679549][7034 ms][DEBUG] START check_boot_completed [2025-09-07 15:15:27][350013883679549][7034 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:15:27][350013883679549][7081 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:15:27][350013883679549][7081 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:15:27][350013883679549][7128 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:15:27][350013883679549][7128 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:15:30][350013883679549][10142 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 15:15:30][350013883679549][10142 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883679549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8808\"}'\'' -e'"" [2025-09-07 15:15:33][350013883679549][13735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d911571f-7aa3-4749-b208-33550c7396eb","id":"QR_d911571f-7aa3-4749-b208-33550c7396eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:15:34][350013883679549][13891 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-09-07 15:15:34][350013883679549][13892 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-09-07 15:15:34][350013883679549][13892 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:15:36][350013883679549][0 ms][INFO] === Request start === [2025-09-07 15:15:36][350013883679549][0 ms][DEBUG] START check_scloud [2025-09-07 15:15:36][350013883679549][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:15:36][350013883679549][235 ms][DEBUG] SU: done in 234 ms; outu0_a118 19991 4972 23854752 125144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:15:36][350013883679549][235 ms][DEBUG] targetPkg: running [2025-09-07 15:15:36][350013883679549][235 ms][DEBUG] END check_scloud in 235 ms [2025-09-07 15:15:36][350013883679549][235 ms][DEBUG] START check_boot_completed [2025-09-07 15:15:36][350013883679549][235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:15:36][350013883679549][281 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:15:36][350013883679549][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:15:36][350013883679549][344 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:15:36][350013883679549][344 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:15:36][350013883679549][344 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:15:36][350013883679549][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883679549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2129\"}'\'' -e'"" [2025-09-07 15:15:36][350013883679549][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:15:36][350013883679549][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883679549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2129\"}'\'' -e'"" [2025-09-07 15:15:42][350013883679549][6077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_162f0aa5-4065-4a88-a690-583a732bc1be","id":"QR_162f0aa5-4065-4a88-a690-583a732bc1be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:15:42][350013883679549][6233 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-09-07 15:15:42][350013883679549][6234 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-09-07 15:15:42][350013883679549][6234 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:16:04][352414570260635][1 ms][INFO] === Request start === [2025-09-07 15:16:04][352414570260635][1 ms][DEBUG] START check_scloud [2025-09-07 15:16:04][352414570260635][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:16:04][352414570260635][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19991 4972 23899772 138924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:16:04][352414570260635][304 ms][DEBUG] targetPkg: running [2025-09-07 15:16:04][352414570260635][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 15:16:04][352414570260635][304 ms][DEBUG] START check_boot_completed [2025-09-07 15:16:04][352414570260635][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:16:04][352414570260635][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:16:04][352414570260635][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:16:04][352414570260635][398 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:16:04][352414570260635][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 15:16:04][352414570260635][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:16:05][352414570260635][506 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1609\nsuccessfulTxPacketsPerSecond: 0.6122339652098049\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.20662896325830915\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1548\nsuccessfulRxPacketsPerSecond: 0.5127459458632116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:16:05][352414570260635][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:16:06][352414570260635][1881 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.951/302.951/302.951/0.000 ms\n [2025-09-07 15:16:06][352414570260635][1881 ms][DEBUG] check_internet: online [2025-09-07 15:16:06][352414570260635][1881 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:16:06][352414570260635][1881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570260635\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9640\"}'\'' -e'"" [2025-09-07 15:16:06][352414570260635][1882 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:16:06][352414570260635][1882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570260635\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9640\"}'\'' -e'"" [2025-09-07 15:16:11][352414570260635][6614 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a998e09-e8ff-468b-91ff-8befc3254c75","id":"QR_3a998e09-e8ff-468b-91ff-8befc3254c75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:16:11][352414570260635][6770 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-07 15:16:11][352414570260635][6770 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-07 15:16:11][352414570260635][6770 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:16:14][352414570260635][0 ms][INFO] === Request start === [2025-09-07 15:16:14][352414570260635][1 ms][DEBUG] START check_scloud [2025-09-07 15:16:14][352414570260635][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:16:15][352414570260635][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 19991 4972 24060676 150744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:16:15][352414570260635][300 ms][DEBUG] targetPkg: running [2025-09-07 15:16:15][352414570260635][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 15:16:15][352414570260635][300 ms][DEBUG] START check_boot_completed [2025-09-07 15:16:15][352414570260635][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:16:15][352414570260635][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:16:15][352414570260635][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:16:15][352414570260635][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 15:16:15][352414570260635][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:16:15][352414570260635][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:16:15][352414570260635][550 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1609\nsuccessfulTxPacketsPerSecond: 0.6122339652098049\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.20662896325830915\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1548\nsuccessfulRxPacketsPerSecond: 0.5127459458632116\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:16:15][352414570260635][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:16:15][352414570260635][924 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.578/261.578/261.578/0.000 ms\n [2025-09-07 15:16:15][352414570260635][925 ms][DEBUG] check_internet: online [2025-09-07 15:16:15][352414570260635][925 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:16:15][352414570260635][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570260635\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7483\"}'\'' -e'"" [2025-09-07 15:16:15][352414570260635][925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:16:15][352414570260635][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352414570260635\",\"model\":\"SM-M526B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7483\"}'\'' -e'"" [2025-09-07 15:16:19][352414570260635][4814 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e35330f2-2f71-44c7-acde-7fe4e0a10f15","id":"QR_e35330f2-2f71-44c7-acde-7fe4e0a10f15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:16:19][352414570260635][4970 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-07 15:16:19][352414570260635][4970 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-07 15:16:19][352414570260635][4970 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:19:03][353773292637829][1 ms][INFO] === Request start === [2025-09-07 15:19:03][353773292637829][1 ms][DEBUG] START check_scloud [2025-09-07 15:19:03][353773292637829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:19:03][353773292637829][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 19991 4972 24151892 161624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:19:03][353773292637829][258 ms][DEBUG] targetPkg: running [2025-09-07 15:19:03][353773292637829][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-07 15:19:03][353773292637829][258 ms][DEBUG] START check_boot_completed [2025-09-07 15:19:03][353773292637829][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:19:03][353773292637829][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:19:03][353773292637829][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:19:03][353773292637829][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:19:03][353773292637829][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:19:03][353773292637829][336 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:19:03][353773292637829][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773292637829\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2620\"}'\'' -e'"" [2025-09-07 15:19:03][353773292637829][336 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:19:03][353773292637829][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773292637829\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2620\"}'\'' -e'"" [2025-09-07 15:19:08][353773292637829][4725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_625207a4-78a2-49f1-b3a2-2d6984d18ef3","id":"QR_625207a4-78a2-49f1-b3a2-2d6984d18ef3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:19:08][353773292637829][4881 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-09-07 15:19:08][353773292637829][4882 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-09-07 15:19:08][353773292637829][4882 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:19:10][353773292637829][0 ms][INFO] === Request start === [2025-09-07 15:19:10][353773292637829][1 ms][DEBUG] START check_scloud [2025-09-07 15:19:10][353773292637829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:19:11][353773292637829][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19991 4972 24306652 172420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:19:11][353773292637829][304 ms][DEBUG] targetPkg: running [2025-09-07 15:19:11][353773292637829][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 15:19:11][353773292637829][304 ms][DEBUG] START check_boot_completed [2025-09-07 15:19:11][353773292637829][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:19:11][353773292637829][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:19:11][353773292637829][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:19:11][353773292637829][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:19:11][353773292637829][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:19:11][353773292637829][398 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:19:11][353773292637829][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773292637829\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7355\"}'\'' -e'"" [2025-09-07 15:19:11][353773292637829][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:19:11][353773292637829][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773292637829\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7355\"}'\'' -e'"" [2025-09-07 15:19:16][353773292637829][5443 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ac0e052-ff10-479e-acc7-b72f995e8ebf","id":"QR_5ac0e052-ff10-479e-acc7-b72f995e8ebf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:19:16][353773292637829][5599 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-07 15:19:16][353773292637829][5600 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-07 15:19:16][353773292637829][5600 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:21:04][352042190614707][1 ms][INFO] === Request start === [2025-09-07 15:21:04][352042190614707][1 ms][DEBUG] START check_scloud [2025-09-07 15:21:04][352042190614707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:21:05][352042190614707][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 19991 4972 24420508 184484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:21:05][352042190614707][297 ms][DEBUG] targetPkg: running [2025-09-07 15:21:05][352042190614707][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 15:21:05][352042190614707][298 ms][DEBUG] START check_boot_completed [2025-09-07 15:21:05][352042190614707][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:21:05][352042190614707][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:21:05][352042190614707][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:21:05][352042190614707][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:21:05][352042190614707][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:21:05][352042190614707][406 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:21:05][352042190614707][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042190614707\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1178\"}'\'' -e'"" [2025-09-07 15:21:05][352042190614707][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:21:05][352042190614707][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042190614707\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1178\"}'\'' -e'"" [2025-09-07 15:21:11][352042190614707][7185 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c2b8d6d-287a-4a80-8ade-f310932c6194","id":"QR_6c2b8d6d-287a-4a80-8ade-f310932c6194","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:21:12][352042190614707][7342 ms][DEBUG] proc_open done in 6935 ms; code=255; res.len=3343 [2025-09-07 15:21:12][352042190614707][7342 ms][DEBUG] END runCmdUntilRes#1 in 6935 ms [2025-09-07 15:21:12][352042190614707][7342 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:25:04][355773111599422][1 ms][INFO] === Request start === [2025-09-07 15:25:04][355773111599422][1 ms][DEBUG] START check_scloud [2025-09-07 15:25:04][355773111599422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:25:04][355773111599422][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 19991 4972 24562944 195820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:25:04][355773111599422][274 ms][DEBUG] targetPkg: running [2025-09-07 15:25:04][355773111599422][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-07 15:25:04][355773111599422][274 ms][DEBUG] START check_boot_completed [2025-09-07 15:25:04][355773111599422][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:25:04][355773111599422][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:25:04][355773111599422][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:25:04][355773111599422][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:25:04][355773111599422][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:25:04][355773111599422][368 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:25:04][355773111599422][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355773111599422\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3299\"}'\'' -e'"" [2025-09-07 15:25:04][355773111599422][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:25:04][355773111599422][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355773111599422\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3299\"}'\'' -e'"" [2025-09-07 15:25:10][355773111599422][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e4a8d96-6ceb-4138-b2c6-747dbe3b665a","id":"QR_9e4a8d96-6ceb-4138-b2c6-747dbe3b665a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:25:10][355773111599422][5913 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-07 15:25:10][355773111599422][5913 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-07 15:25:10][355773111599422][5913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:25:14][355773111599422][0 ms][INFO] === Request start === [2025-09-07 15:25:14][355773111599422][1 ms][DEBUG] START check_scloud [2025-09-07 15:25:14][355773111599422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:25:14][355773111599422][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 19991 4972 24732168 207724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:25:14][355773111599422][263 ms][DEBUG] targetPkg: running [2025-09-07 15:25:14][355773111599422][263 ms][DEBUG] END check_scloud in 263 ms [2025-09-07 15:25:14][355773111599422][263 ms][DEBUG] START check_boot_completed [2025-09-07 15:25:14][355773111599422][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:25:14][355773111599422][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:25:14][355773111599422][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:25:14][355773111599422][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:25:14][355773111599422][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:25:14][355773111599422][357 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:25:14][355773111599422][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355773111599422\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6202\"}'\'' -e'"" [2025-09-07 15:25:14][355773111599422][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:25:14][355773111599422][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355773111599422\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6202\"}'\'' -e'"" [2025-09-07 15:25:17][355773111599422][3934 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e34d19bb-59e9-4920-b390-f2dc11707069","id":"QR_e34d19bb-59e9-4920-b390-f2dc11707069","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:25:18][355773111599422][4090 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-07 15:25:18][355773111599422][4090 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-07 15:25:18][355773111599422][4090 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:26:03][350290810980014][0 ms][INFO] === Request start === [2025-09-07 15:26:03][350290810980014][1 ms][DEBUG] START check_scloud [2025-09-07 15:26:03][350290810980014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:26:03][350290810980014][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 19991 4972 24854216 218808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:26:03][350290810980014][317 ms][DEBUG] targetPkg: running [2025-09-07 15:26:03][350290810980014][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 15:26:03][350290810980014][318 ms][DEBUG] START check_boot_completed [2025-09-07 15:26:03][350290810980014][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:26:03][350290810980014][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:26:03][350290810980014][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:26:03][350290810980014][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:26:03][350290810980014][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:26:03][350290810980014][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:26:03][350290810980014][521 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2036\nsuccessfulTxPacketsPerSecond: 0.14476093157917147\nretriedTxPackets: 403\nretriedTxPacketsPerSecond: 0.02554604674926555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.1362455826627496\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:26:03][350290810980014][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:26:05][350290810980014][2021 ms][DEBUG] SU: done in 1500 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.909/297.909/297.909/0.000 ms\n [2025-09-07 15:26:05][350290810980014][2021 ms][DEBUG] check_internet: online [2025-09-07 15:26:05][350290810980014][2021 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:26:05][350290810980014][2021 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810980014\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4689\"}'\'' -e'"" [2025-09-07 15:26:05][350290810980014][2021 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:26:05][350290810980014][2021 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810980014\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4689\"}'\'' -e'"" [2025-09-07 15:26:08][350290810980014][5410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4892ac4d-44bb-4986-8f95-3a7d9a8da369","id":"QR_4892ac4d-44bb-4986-8f95-3a7d9a8da369","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:26:08][350290810980014][5566 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-07 15:26:08][350290810980014][5566 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-09-07 15:26:08][350290810980014][5566 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:26:11][350290810980014][0 ms][INFO] === Request start === [2025-09-07 15:26:11][350290810980014][1 ms][DEBUG] START check_scloud [2025-09-07 15:26:11][350290810980014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:26:11][350290810980014][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 19991 4972 25015120 230588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:26:11][350290810980014][296 ms][DEBUG] targetPkg: running [2025-09-07 15:26:11][350290810980014][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 15:26:11][350290810980014][296 ms][DEBUG] START check_boot_completed [2025-09-07 15:26:11][350290810980014][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:26:11][350290810980014][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:26:11][350290810980014][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:26:11][350290810980014][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 15:26:11][350290810980014][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:26:11][350290810980014][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:26:11][350290810980014][530 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2036\nsuccessfulTxPacketsPerSecond: 0.14476093157917147\nretriedTxPackets: 403\nretriedTxPacketsPerSecond: 0.02554604674926555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.1362455826627496\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:26:11][350290810980014][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:26:12][350290810980014][983 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=349 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 349.116/349.116/349.116/0.000 ms\n [2025-09-07 15:26:12][350290810980014][983 ms][DEBUG] check_internet: online [2025-09-07 15:26:12][350290810980014][983 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:26:12][350290810980014][983 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810980014\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6223\"}'\'' -e'"" [2025-09-07 15:26:12][350290810980014][983 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:26:12][350290810980014][983 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810980014\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6223\"}'\'' -e'"" [2025-09-07 15:26:17][350290810980014][5935 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37cefce2-364b-4686-b664-69de7ce2afa4","id":"QR_37cefce2-364b-4686-b664-69de7ce2afa4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:26:17][350290810980014][6091 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-07 15:26:17][350290810980014][6091 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-07 15:26:17][350290810980014][6091 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:26:22][357855572808836][0 ms][INFO] === Request start === [2025-09-07 15:26:22][357855572808836][1 ms][DEBUG] START check_scloud [2025-09-07 15:26:22][357855572808836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:26:23][357855572808836][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 19991 4972 25153628 241172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:26:23][357855572808836][320 ms][DEBUG] targetPkg: running [2025-09-07 15:26:23][357855572808836][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 15:26:23][357855572808836][320 ms][DEBUG] START check_boot_completed [2025-09-07 15:26:23][357855572808836][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:26:23][357855572808836][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:26:23][357855572808836][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:26:23][357855572808836][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:26:23][357855572808836][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:26:23][357855572808836][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:26:23][357855572808836][538 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2036\nsuccessfulTxPacketsPerSecond: 0.14476093157917147\nretriedTxPackets: 403\nretriedTxPacketsPerSecond: 0.02554604674926555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.1362455826627496\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:26:23][357855572808836][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:26:23][357855572808836][898 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.874/256.874/256.874/0.000 ms\n [2025-09-07 15:26:23][357855572808836][898 ms][DEBUG] check_internet: online [2025-09-07 15:26:23][357855572808836][898 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:26:23][357855572808836][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855572808836\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5439\"}'\'' -e'"" [2025-09-07 15:26:23][357855572808836][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:26:23][357855572808836][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855572808836\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5439\"}'\'' -e'"" [2025-09-07 15:26:27][357855572808836][4662 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 15:26:27][357855572808836][4662 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-07 15:26:27][357855572808836][4662 ms][WARN] Detected error: Process with pid 19991 either refused to load frida-agent, or terminated during injectionProcess with pid 19991 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 15:26:27][357855572808836][4662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:26:27][357855572808836][4928 ms][DEBUG] SU: done in 266 ms; outsystem 5393 4972 12767412 252896 ep_poll 0 S system_server\n [2025-09-07 15:26:27][357855572808836][4928 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 15:26:27][357855572808836][5068 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 15:26:27][357855572808836][5068 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 15:26:27][357855572808836][5068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:26:28][357855572808836][5224 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 15:26:28][357855572808836][5224 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:26:28][357855572808836][5381 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 15:26:30][357855572808836][7396 ms][DEBUG] START check_boot_completed [2025-09-07 15:26:30][357855572808836][7396 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:26:30][357855572808836][7443 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:26:30][357855572808836][7443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:26:30][357855572808836][7491 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:26:30][357855572808836][7491 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 15:26:33][357855572808836][10504 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 15:26:33][357855572808836][10504 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855572808836\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5439\"}'\'' -e'"" [2025-09-07 15:26:38][357855572808836][15253 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5443d3cd-f570-46c3-b5a9-b18a17ca4edf","id":"QR_5443d3cd-f570-46c3-b5a9-b18a17ca4edf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:26:38][357855572808836][15409 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-07 15:26:38][357855572808836][15409 ms][DEBUG] END runCmdUntilRes#2 in 4905 ms [2025-09-07 15:26:38][357855572808836][15409 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:26:41][357855572808836][0 ms][INFO] === Request start === [2025-09-07 15:26:41][357855572808836][1 ms][DEBUG] START check_scloud [2025-09-07 15:26:41][357855572808836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:26:41][357855572808836][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 21404 4972 23922848 124192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:26:41][357855572808836][240 ms][DEBUG] targetPkg: running [2025-09-07 15:26:41][357855572808836][240 ms][DEBUG] END check_scloud in 240 ms [2025-09-07 15:26:41][357855572808836][240 ms][DEBUG] START check_boot_completed [2025-09-07 15:26:41][357855572808836][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:26:41][357855572808836][287 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:26:41][357855572808836][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:26:41][357855572808836][349 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:26:41][357855572808836][350 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:26:41][357855572808836][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:26:42][357855572808836][490 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2036\nsuccessfulTxPacketsPerSecond: 0.14476093157917147\nretriedTxPackets: 403\nretriedTxPacketsPerSecond: 0.02554604674926555\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1922\nsuccessfulRxPacketsPerSecond: 0.1362455826627496\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:26:42][357855572808836][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:26:42][357855572808836][883 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.409/295.409/295.409/0.000 ms\n [2025-09-07 15:26:42][357855572808836][883 ms][DEBUG] check_internet: online [2025-09-07 15:26:42][357855572808836][883 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:26:42][357855572808836][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855572808836\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2387\"}'\'' -e'"" [2025-09-07 15:26:42][357855572808836][883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:26:42][357855572808836][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855572808836\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2387\"}'\'' -e'"" [2025-09-07 15:26:46][357855572808836][5348 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7f7aa78-921d-4dbb-b75e-fee4280160ab","id":"QR_b7f7aa78-921d-4dbb-b75e-fee4280160ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:26:47][357855572808836][5504 ms][DEBUG] proc_open done in 4621 ms; code=255; res.len=3343 [2025-09-07 15:26:47][357855572808836][5505 ms][DEBUG] END runCmdUntilRes#1 in 4622 ms [2025-09-07 15:26:47][357855572808836][5505 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:31:03][356414816583804][1 ms][INFO] === Request start === [2025-09-07 15:31:03][356414816583804][1 ms][DEBUG] START check_scloud [2025-09-07 15:31:03][356414816583804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:31:03][356414816583804][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 21404 4972 23979176 138260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:31:03][356414816583804][258 ms][DEBUG] targetPkg: running [2025-09-07 15:31:03][356414816583804][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-07 15:31:03][356414816583804][258 ms][DEBUG] START check_boot_completed [2025-09-07 15:31:03][356414816583804][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:31:03][356414816583804][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:31:03][356414816583804][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:31:03][356414816583804][351 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 15:31:03][356414816583804][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:31:03][356414816583804][351 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:31:03][356414816583804][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816583804\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6611\"}'\'' -e'"" [2025-09-07 15:31:03][356414816583804][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:31:03][356414816583804][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816583804\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6611\"}'\'' -e'"" [2025-09-07 15:31:08][356414816583804][5272 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc4df27f-715d-4f2f-b455-a455eb11d7f6","id":"QR_cc4df27f-715d-4f2f-b455-a455eb11d7f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:31:08][356414816583804][5428 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-09-07 15:31:08][356414816583804][5428 ms][DEBUG] END runCmdUntilRes#1 in 5076 ms [2025-09-07 15:31:08][356414816583804][5428 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:31:11][356414816583804][0 ms][INFO] === Request start === [2025-09-07 15:31:11][356414816583804][1 ms][DEBUG] START check_scloud [2025-09-07 15:31:11][356414816583804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:31:11][356414816583804][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 21404 4972 24111472 149880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:31:11][356414816583804][310 ms][DEBUG] targetPkg: running [2025-09-07 15:31:11][356414816583804][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 15:31:11][356414816583804][310 ms][DEBUG] START check_boot_completed [2025-09-07 15:31:11][356414816583804][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:31:11][356414816583804][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:31:11][356414816583804][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:31:11][356414816583804][450 ms][DEBUG] SU: done in 93 ms; out [2025-09-07 15:31:11][356414816583804][450 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 15:31:11][356414816583804][450 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:31:11][356414816583804][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816583804\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-09-07 15:31:11][356414816583804][451 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:31:11][356414816583804][451 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816583804\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-09-07 15:31:17][356414816583804][6090 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35ea3745-b7a1-425b-9768-a327c231ef0b","id":"QR_35ea3745-b7a1-425b-9768-a327c231ef0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:31:17][356414816583804][6246 ms][DEBUG] proc_open done in 5795 ms; code=255; res.len=3343 [2025-09-07 15:31:17][356414816583804][6246 ms][DEBUG] END runCmdUntilRes#1 in 5795 ms [2025-09-07 15:31:17][356414816583804][6246 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:32:04][350183770807261][0 ms][INFO] === Request start === [2025-09-07 15:32:04][350183770807261][1 ms][DEBUG] START check_scloud [2025-09-07 15:32:04][350183770807261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:32:05][350183770807261][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 21404 4972 24210992 131676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:32:05][350183770807261][318 ms][DEBUG] targetPkg: running [2025-09-07 15:32:05][350183770807261][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 15:32:05][350183770807261][318 ms][DEBUG] START check_boot_completed [2025-09-07 15:32:05][350183770807261][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:32:05][350183770807261][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:32:05][350183770807261][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:32:05][350183770807261][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:32:05][350183770807261][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:32:05][350183770807261][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:32:05][350183770807261][521 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2256\nsuccessfulTxPacketsPerSecond: 0.12076148743649241\nretriedTxPackets: 466\nretriedTxPacketsPerSecond: 0.01725164106235606\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2113\nsuccessfulRxPacketsPerSecond: 0.12076148743649241\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:32:05][350183770807261][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:32:05][350183770807261][1005 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.182/220.182/220.182/0.000 ms\n [2025-09-07 15:32:05][350183770807261][1005 ms][DEBUG] check_internet: online [2025-09-07 15:32:05][350183770807261][1005 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:32:05][350183770807261][1005 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183770807261\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4507\"}'\'' -e'"" [2025-09-07 15:32:05][350183770807261][1005 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:32:05][350183770807261][1005 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183770807261\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4507\"}'\'' -e'"" [2025-09-07 15:32:11][350183770807261][6098 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d05f8f0a-6067-4355-8b22-27324284c05b","id":"QR_d05f8f0a-6067-4355-8b22-27324284c05b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:32:11][350183770807261][6254 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-07 15:32:11][350183770807261][6254 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-07 15:32:11][350183770807261][6254 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:32:14][350183770807261][0 ms][INFO] === Request start === [2025-09-07 15:32:14][350183770807261][1 ms][DEBUG] START check_scloud [2025-09-07 15:32:14][350183770807261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:32:15][350183770807261][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 21404 4972 24339256 142976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:32:15][350183770807261][271 ms][DEBUG] targetPkg: running [2025-09-07 15:32:15][350183770807261][271 ms][DEBUG] END check_scloud in 271 ms [2025-09-07 15:32:15][350183770807261][271 ms][DEBUG] START check_boot_completed [2025-09-07 15:32:15][350183770807261][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:32:15][350183770807261][318 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:32:15][350183770807261][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:32:15][350183770807261][380 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:32:15][350183770807261][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:32:15][350183770807261][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:32:15][350183770807261][536 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2256\nsuccessfulTxPacketsPerSecond: 0.12076148743649241\nretriedTxPackets: 466\nretriedTxPacketsPerSecond: 0.01725164106235606\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2113\nsuccessfulRxPacketsPerSecond: 0.12076148743649241\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:32:15][350183770807261][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:32:15][350183770807261][911 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.159/276.159/276.159/0.000 ms\n [2025-09-07 15:32:15][350183770807261][912 ms][DEBUG] check_internet: online [2025-09-07 15:32:15][350183770807261][912 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:32:15][350183770807261][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183770807261\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2317\"}'\'' -e'"" [2025-09-07 15:32:15][350183770807261][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:32:15][350183770807261][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183770807261\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2317\"}'\'' -e'"" [2025-09-07 15:32:19][350183770807261][4660 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b149bf79-79a8-4848-99f4-e512dc6baae9","id":"QR_b149bf79-79a8-4848-99f4-e512dc6baae9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:32:19][350183770807261][4817 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-09-07 15:32:19][350183770807261][4817 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-07 15:32:19][350183770807261][4817 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:33:03][354791640913253][0 ms][INFO] === Request start === [2025-09-07 15:33:03][354791640913253][1 ms][DEBUG] START check_scloud [2025-09-07 15:33:03][354791640913253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:33:03][354791640913253][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 21404 4972 24476664 155132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:33:03][354791640913253][257 ms][DEBUG] targetPkg: running [2025-09-07 15:33:03][354791640913253][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-07 15:33:03][354791640913253][257 ms][DEBUG] START check_boot_completed [2025-09-07 15:33:03][354791640913253][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:33:04][354791640913253][302 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 15:33:04][354791640913253][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:33:04][354791640913253][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:33:04][354791640913253][349 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 15:33:04][354791640913253][349 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:33:04][354791640913253][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791640913253\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6746\"}'\'' -e'"" [2025-09-07 15:33:04][354791640913253][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:33:04][354791640913253][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791640913253\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6746\"}'\'' -e'"" [2025-09-07 15:33:07][354791640913253][3785 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d97e5e0-b85c-4964-a42e-eab6c8841b9a","id":"QR_4d97e5e0-b85c-4964-a42e-eab6c8841b9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:33:07][354791640913253][3941 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-07 15:33:07][354791640913253][3941 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-07 15:33:07][354791640913253][3941 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:33:09][354791640913253][1 ms][INFO] === Request start === [2025-09-07 15:33:09][354791640913253][1 ms][DEBUG] START check_scloud [2025-09-07 15:33:09][354791640913253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:33:10][354791640913253][281 ms][DEBUG] SU: done in 279 ms; outu0_a118 21404 4972 24645760 165948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:33:10][354791640913253][281 ms][DEBUG] targetPkg: running [2025-09-07 15:33:10][354791640913253][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-07 15:33:10][354791640913253][281 ms][DEBUG] START check_boot_completed [2025-09-07 15:33:10][354791640913253][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:33:10][354791640913253][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:33:10][354791640913253][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:33:10][354791640913253][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:33:10][354791640913253][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:33:10][354791640913253][374 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:33:10][354791640913253][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791640913253\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3181\"}'\'' -e'"" [2025-09-07 15:33:10][354791640913253][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:33:10][354791640913253][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791640913253\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3181\"}'\'' -e'"" [2025-09-07 15:33:16][354791640913253][6154 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5395d792-ee8a-4fa4-a3da-a44ff28f80e7","id":"QR_5395d792-ee8a-4fa4-a3da-a44ff28f80e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:33:16][354791640913253][6310 ms][DEBUG] proc_open done in 5936 ms; code=255; res.len=3343 [2025-09-07 15:33:16][354791640913253][6310 ms][DEBUG] END runCmdUntilRes#1 in 5936 ms [2025-09-07 15:33:16][354791640913253][6310 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:34:03][350887161949215][0 ms][INFO] === Request start === [2025-09-07 15:34:03][350887161949215][1 ms][DEBUG] START check_scloud [2025-09-07 15:34:03][350887161949215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:34:03][350887161949215][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 21404 4972 24775872 177732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:34:03][350887161949215][268 ms][DEBUG] targetPkg: running [2025-09-07 15:34:03][350887161949215][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 15:34:03][350887161949215][268 ms][DEBUG] START check_boot_completed [2025-09-07 15:34:03][350887161949215][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:34:04][350887161949215][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:34:04][350887161949215][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:34:04][350887161949215][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:34:04][350887161949215][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:34:04][350887161949215][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:34:04][350887161949215][471 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2256\nsuccessfulTxPacketsPerSecond: 0.12076148743649241\nretriedTxPackets: 466\nretriedTxPacketsPerSecond: 0.01725164106235606\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2113\nsuccessfulRxPacketsPerSecond: 0.12076148743649241\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:34:04][350887161949215][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:34:04][350887161949215][862 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.592/254.592/254.592/0.000 ms\n [2025-09-07 15:34:04][350887161949215][862 ms][DEBUG] check_internet: online [2025-09-07 15:34:04][350887161949215][862 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:34:04][350887161949215][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350887161949215\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9881\"}'\'' -e'"" [2025-09-07 15:34:04][350887161949215][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:34:04][350887161949215][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350887161949215\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9881\"}'\'' -e'"" [2025-09-07 15:34:09][350887161949215][5579 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e152b1e-c922-4e45-9e95-126dea2adbd6","id":"QR_4e152b1e-c922-4e45-9e95-126dea2adbd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:34:09][350887161949215][5735 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-07 15:34:09][350887161949215][5736 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-07 15:34:09][350887161949215][5736 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:34:11][350887161949215][0 ms][INFO] === Request start === [2025-09-07 15:34:11][350887161949215][1 ms][DEBUG] START check_scloud [2025-09-07 15:34:11][350887161949215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:34:12][350887161949215][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 21404 4972 24947080 188364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:34:12][350887161949215][256 ms][DEBUG] targetPkg: running [2025-09-07 15:34:12][350887161949215][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-07 15:34:12][350887161949215][256 ms][DEBUG] START check_boot_completed [2025-09-07 15:34:12][350887161949215][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:34:12][350887161949215][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:34:12][350887161949215][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:34:12][350887161949215][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:34:12][350887161949215][335 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 15:34:12][350887161949215][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:34:12][350887161949215][460 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30361 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2256\nsuccessfulTxPacketsPerSecond: 0.12076148743649241\nretriedTxPackets: 466\nretriedTxPacketsPerSecond: 0.01725164106235606\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2113\nsuccessfulRxPacketsPerSecond: 0.12076148743649241\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 120Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:34:12][350887161949215][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:34:12][350887161949215][803 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.746/227.746/227.746/0.000 ms\n [2025-09-07 15:34:12][350887161949215][803 ms][DEBUG] check_internet: online [2025-09-07 15:34:12][350887161949215][803 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:34:12][350887161949215][803 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350887161949215\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9434\"}'\'' -e'"" [2025-09-07 15:34:12][350887161949215][803 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:34:12][350887161949215][803 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350887161949215\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9434\"}'\'' -e'"" [2025-09-07 15:34:17][350887161949215][6036 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d0771f3-a796-4aed-854e-7d8ef1a4d584","id":"QR_4d0771f3-a796-4aed-854e-7d8ef1a4d584","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:34:18][350887161949215][6192 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-07 15:34:18][350887161949215][6192 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-07 15:34:18][350887161949215][6192 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:35:03][352397452241718][0 ms][INFO] === Request start === [2025-09-07 15:35:03][352397452241718][1 ms][DEBUG] START check_scloud [2025-09-07 15:35:03][352397452241718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:35:03][352397452241718][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 21404 4972 25062988 200392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:35:03][352397452241718][294 ms][DEBUG] targetPkg: running [2025-09-07 15:35:03][352397452241718][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 15:35:03][352397452241718][294 ms][DEBUG] START check_boot_completed [2025-09-07 15:35:03][352397452241718][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:35:03][352397452241718][339 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 15:35:03][352397452241718][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:35:03][352397452241718][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:35:03][352397452241718][401 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 15:35:03][352397452241718][401 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:35:03][352397452241718][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452241718\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3144\"}'\'' -e'"" [2025-09-07 15:35:03][352397452241718][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:35:03][352397452241718][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452241718\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3144\"}'\'' -e'"" [2025-09-07 15:35:07][352397452241718][3885 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6555fa56-682e-4306-8fbc-221a4be3125c","id":"QR_6555fa56-682e-4306-8fbc-221a4be3125c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:35:07][352397452241718][4041 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-07 15:35:07][352397452241718][4041 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-07 15:35:07][352397452241718][4041 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:35:09][352397452241718][0 ms][INFO] === Request start === [2025-09-07 15:35:09][352397452241718][0 ms][DEBUG] START check_scloud [2025-09-07 15:35:09][352397452241718][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:35:10][352397452241718][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 21404 4972 25241548 211492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:35:10][352397452241718][262 ms][DEBUG] targetPkg: running [2025-09-07 15:35:10][352397452241718][262 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 15:35:10][352397452241718][262 ms][DEBUG] START check_boot_completed [2025-09-07 15:35:10][352397452241718][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:35:10][352397452241718][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:35:10][352397452241718][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:35:10][352397452241718][371 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:35:10][352397452241718][371 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:35:10][352397452241718][371 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:35:10][352397452241718][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452241718\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5074\"}'\'' -e'"" [2025-09-07 15:35:10][352397452241718][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:35:10][352397452241718][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452241718\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5074\"}'\'' -e'"" [2025-09-07 15:35:18][352397452241718][8697 ms][DEBUG] proc_open done in 8326 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 15:35:18][352397452241718][8697 ms][DEBUG] END runCmdUntilRes#1 in 8326 ms [2025-09-07 15:35:18][352397452241718][8697 ms][WARN] Detected error: Process with pid 21404 either refused to load frida-agent, or terminated during injectionProcess with pid 21404 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 15:35:18][352397452241718][8697 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:35:18][352397452241718][9072 ms][DEBUG] SU: done in 375 ms; out [2025-09-07 15:35:18][352397452241718][9072 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 15:35:19][352397452241718][9353 ms][DEBUG] SU: done in 281 ms; out [2025-09-07 15:35:19][352397452241718][9354 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 15:35:19][352397452241718][9354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:35:19][352397452241718][9603 ms][DEBUG] SU: done in 249 ms; out [2025-09-07 15:35:19][352397452241718][9603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:35:19][352397452241718][9807 ms][DEBUG] SU: done in 203 ms; out [2025-09-07 15:35:21][352397452241718][11821 ms][DEBUG] START check_boot_completed [2025-09-07 15:35:21][352397452241718][11822 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:35:21][352397452241718][11868 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:35:21][352397452241718][11868 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:35:21][352397452241718][11931 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:35:21][352397452241718][11931 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:35:24][352397452241718][14946 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 15:35:24][352397452241718][14946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452241718\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5074\"}'\'' -e'"" [2025-09-07 15:35:26][352397452241718][16383 ms][DEBUG] proc_open done in 1437 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 15:35:26][352397452241718][16383 ms][DEBUG] END runCmdUntilRes#2 in 1438 ms [2025-09-07 15:35:26][352397452241718][16383 ms][WARN] Detected error 2; Reboot the device [2025-09-07 15:35:26][352397452241718][16383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:35:26][352397452241718][16649 ms][DEBUG] SU: done in 265 ms; outsystem 24362 24022 7542844 132564 0 0 S system_server\n [2025-09-07 15:35:26][352397452241718][16649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 15:35:27][352397452241718][17289 ms][DEBUG] SU: done in 640 ms; out [2025-09-07 15:36:03][350814494151079][1 ms][INFO] === Request start === [2025-09-07 15:36:03][350814494151079][1 ms][DEBUG] START check_scloud [2025-09-07 15:36:03][350814494151079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:36:03][350814494151079][38 ms][DEBUG] SU: done in 36 ms; out [2025-09-07 15:36:03][350814494151079][38 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 15:36:03][350814494151079][100 ms][DEBUG] ADB: done in 62 ms; outList of devices attached\n\n [2025-09-07 15:36:03][350814494151079][100 ms][WARN] check_devices: no device [2025-09-07 15:36:03][350814494151079][100 ms][WARN] check_devices: no device [2025-09-07 15:36:03][350814494151079][100 ms][DEBUG] END check_scloud in 99 ms [2025-09-07 15:37:03][350814494151079][1 ms][INFO] === Request start === [2025-09-07 15:37:03][350814494151079][1 ms][DEBUG] START check_scloud [2025-09-07 15:37:03][350814494151079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:37:03][350814494151079][419 ms][DEBUG] SU: done in 418 ms; out [2025-09-07 15:37:03][350814494151079][419 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 15:37:03][350814494151079][466 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 15:37:03][350814494151079][466 ms][DEBUG] check_devices: device found [2025-09-07 15:37:03][350814494151079][466 ms][WARN] targetPkg: not running, restarting [2025-09-07 15:37:03][350814494151079][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:37:03][350814494151079][606 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 15:37:03][350814494151079][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:37:04][350814494151079][841 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 15:37:06][350814494151079][2856 ms][DEBUG] END check_scloud in 2854 ms [2025-09-07 15:37:06][350814494151079][2856 ms][DEBUG] START check_boot_completed [2025-09-07 15:37:06][350814494151079][2856 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:37:06][350814494151079][2903 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:37:06][350814494151079][2903 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:37:06][350814494151079][2996 ms][DEBUG] SU: done in 93 ms; out [2025-09-07 15:37:06][350814494151079][2996 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-07 15:37:06][350814494151079][2996 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:37:06][350814494151079][2997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494151079\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9692\"}'\'' -e'"" [2025-09-07 15:37:06][350814494151079][2997 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:37:06][350814494151079][2997 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494151079\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9692\"}'\'' -e'"" [2025-09-07 15:37:12][350814494151079][9198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c77c742-bd42-4714-b339-a660744f5159","id":"QR_5c77c742-bd42-4714-b339-a660744f5159","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:37:12][350814494151079][9354 ms][DEBUG] proc_open done in 6357 ms; code=255; res.len=3343 [2025-09-07 15:37:12][350814494151079][9354 ms][DEBUG] END runCmdUntilRes#1 in 6357 ms [2025-09-07 15:37:12][350814494151079][9354 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:37:14][350814494151079][0 ms][INFO] === Request start === [2025-09-07 15:37:14][350814494151079][1 ms][DEBUG] START check_scloud [2025-09-07 15:37:14][350814494151079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:37:15][350814494151079][364 ms][DEBUG] SU: done in 363 ms; outu0_a118 10980 5008 23718400 118168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:37:15][350814494151079][364 ms][DEBUG] targetPkg: running [2025-09-07 15:37:15][350814494151079][364 ms][DEBUG] END check_scloud in 363 ms [2025-09-07 15:37:15][350814494151079][364 ms][DEBUG] START check_boot_completed [2025-09-07 15:37:15][350814494151079][364 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:37:15][350814494151079][410 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:37:15][350814494151079][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:37:15][350814494151079][457 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:37:15][350814494151079][457 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:37:15][350814494151079][457 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:37:15][350814494151079][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494151079\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2766\"}'\'' -e'"" [2025-09-07 15:37:15][350814494151079][457 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:37:15][350814494151079][457 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814494151079\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2766\"}'\'' -e'"" [2025-09-07 15:37:22][350814494151079][7862 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c9220c1-f951-4ace-a290-ddd80a509e29","id":"QR_9c9220c1-f951-4ace-a290-ddd80a509e29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:37:22][350814494151079][8018 ms][DEBUG] proc_open done in 7561 ms; code=255; res.len=3343 [2025-09-07 15:37:22][350814494151079][8018 ms][DEBUG] END runCmdUntilRes#1 in 7561 ms [2025-09-07 15:37:22][350814494151079][8018 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:38:03][350287313882689][0 ms][INFO] === Request start === [2025-09-07 15:38:03][350287313882689][1 ms][DEBUG] START check_scloud [2025-09-07 15:38:03][350287313882689][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:38:03][350287313882689][345 ms][DEBUG] SU: done in 345 ms; outu0_a118 10980 5008 23794012 72996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:38:03][350287313882689][346 ms][DEBUG] targetPkg: running [2025-09-07 15:38:03][350287313882689][346 ms][DEBUG] END check_scloud in 345 ms [2025-09-07 15:38:03][350287313882689][346 ms][DEBUG] START check_boot_completed [2025-09-07 15:38:03][350287313882689][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:38:03][350287313882689][392 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:38:03][350287313882689][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:38:03][350287313882689][440 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:38:03][350287313882689][440 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:38:03][350287313882689][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:38:04][350287313882689][595 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 767\nsuccessfulTxPacketsPerSecond: 7.691174981929651\nretriedTxPackets: 69\nretriedTxPacketsPerSecond: 1.7235092590223315\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 848\nsuccessfulRxPacketsPerSecond: 7.789268802045997\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:38:04][350287313882689][596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:38:05][350287313882689][2407 ms][DEBUG] SU: done in 1812 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.677/301.677/301.677/0.000 ms\n [2025-09-07 15:38:05][350287313882689][2407 ms][DEBUG] check_internet: online [2025-09-07 15:38:05][350287313882689][2408 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:38:05][350287313882689][2408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313882689\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3571\"}'\'' -e'"" [2025-09-07 15:38:05][350287313882689][2408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:38:05][350287313882689][2408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313882689\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3571\"}'\'' -e'"" [2025-09-07 15:38:09][350287313882689][6109 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d09b941-d604-4ae4-8a83-4f78a2ba453b","id":"QR_7d09b941-d604-4ae4-8a83-4f78a2ba453b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:38:09][350287313882689][6266 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-07 15:38:09][350287313882689][6266 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-07 15:38:09][350287313882689][6266 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:38:12][350287313882689][0 ms][INFO] === Request start === [2025-09-07 15:38:12][350287313882689][1 ms][DEBUG] START check_scloud [2025-09-07 15:38:12][350287313882689][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:38:12][350287313882689][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 10980 5008 23969380 96676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:38:12][350287313882689][300 ms][DEBUG] targetPkg: running [2025-09-07 15:38:12][350287313882689][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 15:38:12][350287313882689][300 ms][DEBUG] START check_boot_completed [2025-09-07 15:38:12][350287313882689][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:38:12][350287313882689][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:38:12][350287313882689][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:38:12][350287313882689][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:38:12][350287313882689][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:38:12][350287313882689][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:38:12][350287313882689][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 767\nsuccessfulTxPacketsPerSecond: 7.691174981929651\nretriedTxPackets: 69\nretriedTxPacketsPerSecond: 1.7235092590223315\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 848\nsuccessfulRxPacketsPerSecond: 7.789268802045997\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:38:12][350287313882689][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:38:13][350287313882689][909 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.971/322.971/322.971/0.000 ms\n [2025-09-07 15:38:13][350287313882689][909 ms][DEBUG] check_internet: online [2025-09-07 15:38:13][350287313882689][909 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:38:13][350287313882689][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313882689\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5228\"}'\'' -e'"" [2025-09-07 15:38:13][350287313882689][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:38:13][350287313882689][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313882689\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5228\"}'\'' -e'"" [2025-09-07 15:38:18][350287313882689][6064 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea93d0d2-0f45-424c-8af9-e178caa3aa92","id":"QR_ea93d0d2-0f45-424c-8af9-e178caa3aa92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:38:18][350287313882689][6220 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 15:38:18][350287313882689][6220 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 15:38:18][350287313882689][6220 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:39:03][350973423199284][1 ms][INFO] === Request start === [2025-09-07 15:39:03][350973423199284][1 ms][DEBUG] START check_scloud [2025-09-07 15:39:03][350973423199284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:39:04][350973423199284][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 10980 5008 24089316 103976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:39:04][350973423199284][323 ms][DEBUG] targetPkg: running [2025-09-07 15:39:04][350973423199284][324 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 15:39:04][350973423199284][324 ms][DEBUG] START check_boot_completed [2025-09-07 15:39:04][350973423199284][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:39:04][350973423199284][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:39:04][350973423199284][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:39:04][350973423199284][433 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 15:39:04][350973423199284][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:39:04][350973423199284][433 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:39:04][350973423199284][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973423199284\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8541\"}'\'' -e'"" [2025-09-07 15:39:04][350973423199284][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:39:04][350973423199284][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973423199284\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8541\"}'\'' -e'"" [2025-09-07 15:39:09][350973423199284][5385 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8463c6b0-a190-4dab-96a3-fb8c49e4685b","id":"QR_8463c6b0-a190-4dab-96a3-fb8c49e4685b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:39:09][350973423199284][5541 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-07 15:39:09][350973423199284][5541 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-09-07 15:39:09][350973423199284][5541 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:39:11][350973423199284][0 ms][INFO] === Request start === [2025-09-07 15:39:11][350973423199284][1 ms][DEBUG] START check_scloud [2025-09-07 15:39:11][350973423199284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:39:12][350973423199284][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 10980 5008 24238816 116328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:39:12][350973423199284][323 ms][DEBUG] targetPkg: running [2025-09-07 15:39:12][350973423199284][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 15:39:12][350973423199284][323 ms][DEBUG] START check_boot_completed [2025-09-07 15:39:12][350973423199284][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:39:12][350973423199284][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:39:12][350973423199284][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:39:12][350973423199284][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:39:12][350973423199284][401 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:39:12][350973423199284][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:39:12][350973423199284][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973423199284\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7670\"}'\'' -e'"" [2025-09-07 15:39:12][350973423199284][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:39:12][350973423199284][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973423199284\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7670\"}'\'' -e'"" [2025-09-07 15:39:17][350973423199284][5665 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0a950df-2fcb-4a67-ac48-5cd3bd209e77","id":"QR_a0a950df-2fcb-4a67-ac48-5cd3bd209e77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:39:17][350973423199284][5822 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-07 15:39:17][350973423199284][5822 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-07 15:39:17][350973423199284][5822 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:41:05][352749382156517][1 ms][INFO] === Request start === [2025-09-07 15:41:05][352749382156517][1 ms][DEBUG] START check_scloud [2025-09-07 15:41:05][352749382156517][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:41:05][352749382156517][274 ms][DEBUG] SU: done in 272 ms; outu0_a118 10980 5008 24344352 126672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:41:05][352749382156517][274 ms][DEBUG] targetPkg: running [2025-09-07 15:41:05][352749382156517][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-07 15:41:05][352749382156517][274 ms][DEBUG] START check_boot_completed [2025-09-07 15:41:05][352749382156517][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:41:05][352749382156517][320 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:41:05][352749382156517][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:41:05][352749382156517][383 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:41:05][352749382156517][383 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:41:05][352749382156517][383 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:41:05][352749382156517][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382156517\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5334\"}'\'' -e'"" [2025-09-07 15:41:05][352749382156517][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:41:05][352749382156517][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382156517\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5334\"}'\'' -e'"" [2025-09-07 15:41:11][352749382156517][6225 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b45ba481-d8af-4297-bd2f-1a5f0bfb0e9e","id":"QR_b45ba481-d8af-4297-bd2f-1a5f0bfb0e9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:41:11][352749382156517][6381 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-07 15:41:11][352749382156517][6381 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-07 15:41:11][352749382156517][6381 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:41:14][352749382156517][0 ms][INFO] === Request start === [2025-09-07 15:41:14][352749382156517][1 ms][DEBUG] START check_scloud [2025-09-07 15:41:14][352749382156517][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:41:15][352749382156517][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 10980 5008 24476584 135652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:41:15][352749382156517][329 ms][DEBUG] targetPkg: running [2025-09-07 15:41:15][352749382156517][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-07 15:41:15][352749382156517][329 ms][DEBUG] START check_boot_completed [2025-09-07 15:41:15][352749382156517][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:41:15][352749382156517][376 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:41:15][352749382156517][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:41:15][352749382156517][424 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:41:15][352749382156517][424 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 15:41:15][352749382156517][424 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:41:15][352749382156517][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382156517\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9186\"}'\'' -e'"" [2025-09-07 15:41:15][352749382156517][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:41:15][352749382156517][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749382156517\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9186\"}'\'' -e'"" [2025-09-07 15:41:19][352749382156517][4421 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d68b4e87-9985-429c-91a0-756c4d1940d5","id":"QR_d68b4e87-9985-429c-91a0-756c4d1940d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:41:19][352749382156517][4578 ms][DEBUG] proc_open done in 4153 ms; code=255; res.len=3343 [2025-09-07 15:41:19][352749382156517][4578 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-09-07 15:41:19][352749382156517][4578 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:42:03][351477970989963][0 ms][INFO] === Request start === [2025-09-07 15:42:03][351477970989963][1 ms][DEBUG] START check_scloud [2025-09-07 15:42:03][351477970989963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:42:04][351477970989963][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 10980 5008 24590504 147324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:42:04][351477970989963][269 ms][DEBUG] targetPkg: running [2025-09-07 15:42:04][351477970989963][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 15:42:04][351477970989963][269 ms][DEBUG] START check_boot_completed [2025-09-07 15:42:04][351477970989963][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:42:04][351477970989963][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:42:04][351477970989963][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:42:04][351477970989963][364 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 15:42:04][351477970989963][364 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 15:42:04][351477970989963][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:42:04][351477970989963][503 ms][DEBUG] SU: done in 138 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1140\nsuccessfulTxPacketsPerSecond: 1.5009516757944381\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.32191993046529505\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1178\nsuccessfulRxPacketsPerSecond: 1.3279197131693419\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:42:04][351477970989963][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:42:05][351477970989963][1909 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.022/299.022/299.022/0.000 ms\n [2025-09-07 15:42:05][351477970989963][1909 ms][DEBUG] check_internet: online [2025-09-07 15:42:05][351477970989963][1909 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:42:05][351477970989963][1909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477970989963\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2172\"}'\'' -e'"" [2025-09-07 15:42:05][351477970989963][1909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:42:05][351477970989963][1909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477970989963\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2172\"}'\'' -e'"" [2025-09-07 15:42:09][351477970989963][5345 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72fe34da-5fc4-4fc6-81f3-a2071151ff60","id":"QR_72fe34da-5fc4-4fc6-81f3-a2071151ff60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:42:09][351477970989963][5501 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-07 15:42:09][351477970989963][5501 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-07 15:42:09][351477970989963][5501 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:42:11][351477970989963][0 ms][INFO] === Request start === [2025-09-07 15:42:11][351477970989963][1 ms][DEBUG] START check_scloud [2025-09-07 15:42:11][351477970989963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:42:12][351477970989963][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 10980 5008 24745392 159356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:42:12][351477970989963][291 ms][DEBUG] targetPkg: running [2025-09-07 15:42:12][351477970989963][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-07 15:42:12][351477970989963][291 ms][DEBUG] START check_boot_completed [2025-09-07 15:42:12][351477970989963][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:42:12][351477970989963][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:42:12][351477970989963][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:42:12][351477970989963][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:42:12][351477970989963][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:42:12][351477970989963][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:42:12][351477970989963][510 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1140\nsuccessfulTxPacketsPerSecond: 1.5009516757944381\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.32191993046529505\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1178\nsuccessfulRxPacketsPerSecond: 1.3279197131693419\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:42:12][351477970989963][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:42:12][351477970989963][916 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.873/291.873/291.873/0.000 ms\n [2025-09-07 15:42:12][351477970989963][916 ms][DEBUG] check_internet: online [2025-09-07 15:42:12][351477970989963][916 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:42:12][351477970989963][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477970989963\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4083\"}'\'' -e'"" [2025-09-07 15:42:12][351477970989963][916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:42:12][351477970989963][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477970989963\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4083\"}'\'' -e'"" [2025-09-07 15:42:17][351477970989963][5977 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85a8d99c-a0ee-4fcb-80ba-703908792a3c","id":"QR_85a8d99c-a0ee-4fcb-80ba-703908792a3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:42:17][351477970989963][6133 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 15:42:17][351477970989963][6133 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-07 15:42:17][351477970989963][6133 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:42:22][357042140918419][0 ms][INFO] === Request start === [2025-09-07 15:42:22][357042140918419][1 ms][DEBUG] START check_scloud [2025-09-07 15:42:22][357042140918419][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:42:22][357042140918419][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 10980 5008 24910520 169348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:42:22][357042140918419][316 ms][DEBUG] targetPkg: running [2025-09-07 15:42:22][357042140918419][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 15:42:22][357042140918419][316 ms][DEBUG] START check_boot_completed [2025-09-07 15:42:22][357042140918419][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:42:22][357042140918419][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:42:22][357042140918419][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:42:22][357042140918419][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:42:22][357042140918419][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:42:22][357042140918419][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:42:22][357042140918419][535 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1140\nsuccessfulTxPacketsPerSecond: 1.5009516757944381\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.32191993046529505\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1178\nsuccessfulRxPacketsPerSecond: 1.3279197131693419\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:42:22][357042140918419][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:42:22][357042140918419][894 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.755/246.755/246.755/0.000 ms\n [2025-09-07 15:42:22][357042140918419][894 ms][DEBUG] check_internet: online [2025-09-07 15:42:22][357042140918419][894 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:42:22][357042140918419][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042140918419\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7368\"}'\'' -e'"" [2025-09-07 15:42:22][357042140918419][894 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:42:22][357042140918419][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042140918419\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7368\"}'\'' -e'"" [2025-09-07 15:42:26][357042140918419][4893 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7a08cd3-fec3-4b55-a15d-a24f6d443ba1","id":"QR_f7a08cd3-fec3-4b55-a15d-a24f6d443ba1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:42:27][357042140918419][5049 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-07 15:42:27][357042140918419][5049 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-07 15:42:27][357042140918419][5049 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:42:29][357042140918419][0 ms][INFO] === Request start === [2025-09-07 15:42:29][357042140918419][1 ms][DEBUG] START check_scloud [2025-09-07 15:42:29][357042140918419][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:42:29][357042140918419][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 10980 5008 25071004 178716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:42:29][357042140918419][301 ms][DEBUG] targetPkg: running [2025-09-07 15:42:29][357042140918419][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 15:42:29][357042140918419][301 ms][DEBUG] START check_boot_completed [2025-09-07 15:42:29][357042140918419][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:42:29][357042140918419][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:42:29][357042140918419][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:42:29][357042140918419][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:42:29][357042140918419][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 15:42:29][357042140918419][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:42:30][357042140918419][505 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1140\nsuccessfulTxPacketsPerSecond: 1.5009516757944381\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.32191993046529505\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1178\nsuccessfulRxPacketsPerSecond: 1.3279197131693419\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:42:30][357042140918419][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:42:30][357042140918419][833 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.420/227.420/227.420/0.000 ms\n [2025-09-07 15:42:30][357042140918419][833 ms][DEBUG] check_internet: online [2025-09-07 15:42:30][357042140918419][833 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:42:30][357042140918419][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042140918419\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4579\"}'\'' -e'"" [2025-09-07 15:42:30][357042140918419][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:42:30][357042140918419][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042140918419\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4579\"}'\'' -e'"" [2025-09-07 15:42:34][357042140918419][5160 ms][DEBUG] proc_open done in 4327 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 15:42:34][357042140918419][5160 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-07 15:42:34][357042140918419][5160 ms][WARN] Detected error: Process with pid 10980 either refused to load frida-agent, or terminated during injectionProcess with pid 10980 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 15:42:34][357042140918419][5160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:42:35][357042140918419][5458 ms][DEBUG] SU: done in 298 ms; outsystem 5431 5008 13129492 579076 ep_poll 0 S system_server\n [2025-09-07 15:42:35][357042140918419][5458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 15:42:35][357042140918419][5597 ms][DEBUG] SU: done in 139 ms; out [2025-09-07 15:42:35][357042140918419][5597 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 15:42:35][357042140918419][5597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:42:35][357042140918419][5724 ms][DEBUG] SU: done in 126 ms; out [2025-09-07 15:42:35][357042140918419][5724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:42:35][357042140918419][5894 ms][DEBUG] SU: done in 170 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 15:42:37][357042140918419][7909 ms][DEBUG] START check_boot_completed [2025-09-07 15:42:37][357042140918419][7909 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:42:37][357042140918419][7956 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:42:37][357042140918419][7956 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:42:37][357042140918419][8003 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:42:37][357042140918419][8003 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:42:40][357042140918419][11017 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 15:42:40][357042140918419][11017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042140918419\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4579\"}'\'' -e'"" [2025-09-07 15:42:45][357042140918419][15860 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e5a3f4d-4b27-4fb1-b17c-9fb934b58041","id":"QR_6e5a3f4d-4b27-4fb1-b17c-9fb934b58041","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:42:45][357042140918419][16016 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-07 15:42:45][357042140918419][16016 ms][DEBUG] END runCmdUntilRes#2 in 4999 ms [2025-09-07 15:42:45][357042140918419][16016 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:43:05][356927267864621][0 ms][INFO] === Request start === [2025-09-07 15:43:05][356927267864621][1 ms][DEBUG] START check_scloud [2025-09-07 15:43:05][356927267864621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:43:05][356927267864621][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 17597 5008 23704328 127500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:43:05][356927267864621][307 ms][DEBUG] targetPkg: running [2025-09-07 15:43:05][356927267864621][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 15:43:05][356927267864621][307 ms][DEBUG] START check_boot_completed [2025-09-07 15:43:05][356927267864621][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:43:05][356927267864621][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:43:05][356927267864621][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:43:05][356927267864621][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:43:05][356927267864621][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:43:05][356927267864621][400 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:43:05][356927267864621][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927267864621\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2843\"}'\'' -e'"" [2025-09-07 15:43:05][356927267864621][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:43:05][356927267864621][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927267864621\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2843\"}'\'' -e'"" [2025-09-07 15:43:10][356927267864621][5040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02c55ab3-9cbe-433c-a69c-d93c1b038a69","id":"QR_02c55ab3-9cbe-433c-a69c-d93c1b038a69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:43:10][356927267864621][5196 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-07 15:43:10][356927267864621][5196 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-07 15:43:10][356927267864621][5196 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:43:13][356927267864621][1 ms][INFO] === Request start === [2025-09-07 15:43:13][356927267864621][1 ms][DEBUG] START check_scloud [2025-09-07 15:43:13][356927267864621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:43:14][356927267864621][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 17597 5008 23770592 138180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:43:14][356927267864621][304 ms][DEBUG] targetPkg: running [2025-09-07 15:43:14][356927267864621][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 15:43:14][356927267864621][304 ms][DEBUG] START check_boot_completed [2025-09-07 15:43:14][356927267864621][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:43:14][356927267864621][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:43:14][356927267864621][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:43:14][356927267864621][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:43:14][356927267864621][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:43:14][356927267864621][382 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:43:14][356927267864621][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927267864621\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8824\"}'\'' -e'"" [2025-09-07 15:43:14][356927267864621][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:43:14][356927267864621][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927267864621\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8824\"}'\'' -e'"" [2025-09-07 15:43:17][356927267864621][3756 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7372fec-472b-4eda-a6f7-4d1aa8cc8c0a","id":"QR_a7372fec-472b-4eda-a6f7-4d1aa8cc8c0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:43:17][356927267864621][3913 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-07 15:43:17][356927267864621][3913 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-07 15:43:17][356927267864621][3913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:43:20][357567914326423][0 ms][INFO] === Request start === [2025-09-07 15:43:20][357567914326423][1 ms][DEBUG] START check_scloud [2025-09-07 15:43:20][357567914326423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:43:21][357567914326423][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 17597 5008 23915112 149896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:43:21][357567914326423][279 ms][DEBUG] targetPkg: running [2025-09-07 15:43:21][357567914326423][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-07 15:43:21][357567914326423][279 ms][DEBUG] START check_boot_completed [2025-09-07 15:43:21][357567914326423][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:43:21][357567914326423][326 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:43:21][357567914326423][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:43:21][357567914326423][404 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 15:43:21][357567914326423][404 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 15:43:21][357567914326423][404 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:43:21][357567914326423][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914326423\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8137\"}'\'' -e'"" [2025-09-07 15:43:21][357567914326423][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:43:21][357567914326423][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914326423\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8137\"}'\'' -e'"" [2025-09-07 15:43:26][357567914326423][5949 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a23d99e-c233-41f1-9007-0b723cc22b0d","id":"QR_3a23d99e-c233-41f1-9007-0b723cc22b0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:43:26][357567914326423][6105 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-09-07 15:43:26][357567914326423][6105 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-09-07 15:43:26][357567914326423][6106 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:43:30][357567914326423][0 ms][INFO] === Request start === [2025-09-07 15:43:30][357567914326423][1 ms][DEBUG] START check_scloud [2025-09-07 15:43:30][357567914326423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:43:30][357567914326423][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 17597 5008 24065868 160900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:43:30][357567914326423][307 ms][DEBUG] targetPkg: running [2025-09-07 15:43:30][357567914326423][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 15:43:30][357567914326423][307 ms][DEBUG] START check_boot_completed [2025-09-07 15:43:30][357567914326423][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:43:30][357567914326423][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:43:30][357567914326423][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:43:30][357567914326423][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:43:30][357567914326423][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:43:30][357567914326423][385 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:43:30][357567914326423][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914326423\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1450\"}'\'' -e'"" [2025-09-07 15:43:30][357567914326423][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:43:30][357567914326423][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914326423\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1450\"}'\'' -e'"" [2025-09-07 15:43:34][357567914326423][4259 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac1e1f4a-e426-4db4-9c63-c3bb7514ca86","id":"QR_ac1e1f4a-e426-4db4-9c63-c3bb7514ca86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:43:34][357567914326423][4415 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-07 15:43:34][357567914326423][4415 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-07 15:43:34][357567914326423][4415 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:44:03][352674520284486][0 ms][INFO] === Request start === [2025-09-07 15:44:03][352674520284486][1 ms][DEBUG] START check_scloud [2025-09-07 15:44:03][352674520284486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:44:04][352674520284486][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 17597 5008 24155112 172656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:44:04][352674520284486][305 ms][DEBUG] targetPkg: running [2025-09-07 15:44:04][352674520284486][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 15:44:04][352674520284486][306 ms][DEBUG] START check_boot_completed [2025-09-07 15:44:04][352674520284486][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:44:04][352674520284486][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:44:04][352674520284486][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:44:04][352674520284486][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:44:04][352674520284486][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:44:04][352674520284486][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:44:04][352674520284486][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1140\nsuccessfulTxPacketsPerSecond: 1.5009516757944381\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.32191993046529505\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1178\nsuccessfulRxPacketsPerSecond: 1.3279197131693419\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:44:04][352674520284486][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:44:04][352674520284486][868 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.868/229.868/229.868/0.000 ms\n [2025-09-07 15:44:04][352674520284486][868 ms][DEBUG] check_internet: online [2025-09-07 15:44:04][352674520284486][868 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:44:04][352674520284486][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520284486\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2059\"}'\'' -e'"" [2025-09-07 15:44:04][352674520284486][868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:44:04][352674520284486][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520284486\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2059\"}'\'' -e'"" [2025-09-07 15:44:08][352674520284486][4242 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_feaa8259-46bd-47a2-8b85-00c51628840f","id":"QR_feaa8259-46bd-47a2-8b85-00c51628840f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:44:08][352674520284486][4398 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-07 15:44:08][352674520284486][4398 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-07 15:44:08][352674520284486][4398 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:44:10][352674520284486][0 ms][INFO] === Request start === [2025-09-07 15:44:10][352674520284486][1 ms][DEBUG] START check_scloud [2025-09-07 15:44:10][352674520284486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:44:10][352674520284486][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 17597 5008 24289520 183560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:44:10][352674520284486][289 ms][DEBUG] targetPkg: running [2025-09-07 15:44:10][352674520284486][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-07 15:44:10][352674520284486][290 ms][DEBUG] START check_boot_completed [2025-09-07 15:44:10][352674520284486][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:44:10][352674520284486][336 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:44:10][352674520284486][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:44:10][352674520284486][399 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:44:10][352674520284486][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:44:10][352674520284486][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:44:11][352674520284486][539 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1140\nsuccessfulTxPacketsPerSecond: 1.5009516757944381\nretriedTxPackets: 149\nretriedTxPacketsPerSecond: 0.32191993046529505\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1178\nsuccessfulRxPacketsPerSecond: 1.3279197131693419\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:44:11][352674520284486][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:44:11][352674520284486][977 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.575/291.575/291.575/0.000 ms\n [2025-09-07 15:44:11][352674520284486][977 ms][DEBUG] check_internet: online [2025-09-07 15:44:11][352674520284486][977 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:44:11][352674520284486][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520284486\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6050\"}'\'' -e'"" [2025-09-07 15:44:11][352674520284486][977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:44:11][352674520284486][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520284486\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6050\"}'\'' -e'"" [2025-09-07 15:44:16][352674520284486][5725 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ea44c65-bbbd-48ed-85f6-9b6eac9fb246","id":"QR_3ea44c65-bbbd-48ed-85f6-9b6eac9fb246","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:44:16][352674520284486][5882 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-07 15:44:16][352674520284486][5882 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-07 15:44:16][352674520284486][5882 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:50:03][357582387063452][1 ms][INFO] === Request start === [2025-09-07 15:50:03][357582387063452][1 ms][DEBUG] START check_scloud [2025-09-07 15:50:03][357582387063452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:50:03][357582387063452][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 17597 5008 24380800 196672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:50:03][357582387063452][306 ms][DEBUG] targetPkg: running [2025-09-07 15:50:03][357582387063452][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 15:50:03][357582387063452][306 ms][DEBUG] START check_boot_completed [2025-09-07 15:50:03][357582387063452][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:50:03][357582387063452][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:50:03][357582387063452][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:50:03][357582387063452][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:50:03][357582387063452][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:50:03][357582387063452][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:50:03][357582387063452][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1444\nsuccessfulTxPacketsPerSecond: 1.0097353098459156\nretriedTxPackets: 235\nretriedTxPacketsPerSecond: 0.285648804759042\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1439\nsuccessfulRxPacketsPerSecond: 0.8669109074663948\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:50:03][357582387063452][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:50:05][357582387063452][1961 ms][DEBUG] SU: done in 1453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.644/301.644/301.644/0.000 ms\n [2025-09-07 15:50:05][357582387063452][1962 ms][DEBUG] check_internet: online [2025-09-07 15:50:05][357582387063452][1962 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:50:05][357582387063452][1962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387063452\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7051\"}'\'' -e'"" [2025-09-07 15:50:05][357582387063452][1962 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:50:05][357582387063452][1962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387063452\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7051\"}'\'' -e'"" [2025-09-07 15:50:09][357582387063452][5804 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b16d489-05d6-4158-91d6-de04f959b1cd","id":"QR_5b16d489-05d6-4158-91d6-de04f959b1cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:50:09][357582387063452][5960 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-07 15:50:09][357582387063452][5960 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-07 15:50:09][357582387063452][5960 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:50:11][357582387063452][0 ms][INFO] === Request start === [2025-09-07 15:50:11][357582387063452][1 ms][DEBUG] START check_scloud [2025-09-07 15:50:11][357582387063452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:50:11][357582387063452][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 17597 5008 24533640 207580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:50:11][357582387063452][288 ms][DEBUG] targetPkg: running [2025-09-07 15:50:11][357582387063452][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 15:50:11][357582387063452][288 ms][DEBUG] START check_boot_completed [2025-09-07 15:50:11][357582387063452][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:50:11][357582387063452][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:50:11][357582387063452][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:50:11][357582387063452][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 15:50:11][357582387063452][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:50:11][357582387063452][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:50:12][357582387063452][538 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1444\nsuccessfulTxPacketsPerSecond: 1.0097353098459156\nretriedTxPackets: 235\nretriedTxPacketsPerSecond: 0.285648804759042\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1439\nsuccessfulRxPacketsPerSecond: 0.8669109074663948\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:50:12][357582387063452][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:50:12][357582387063452][866 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.285/227.285/227.285/0.000 ms\n [2025-09-07 15:50:12][357582387063452][866 ms][DEBUG] check_internet: online [2025-09-07 15:50:12][357582387063452][866 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:50:12][357582387063452][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387063452\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7154\"}'\'' -e'"" [2025-09-07 15:50:12][357582387063452][866 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:50:12][357582387063452][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387063452\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7154\"}'\'' -e'"" [2025-09-07 15:50:17][357582387063452][5802 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d71cc0ed-65db-4700-8520-5a0c25cd0a1e","id":"QR_d71cc0ed-65db-4700-8520-5a0c25cd0a1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:50:17][357582387063452][5958 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 15:50:17][357582387063452][5958 ms][DEBUG] END runCmdUntilRes#1 in 5093 ms [2025-09-07 15:50:17][357582387063452][5958 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:51:03][354255813628692][0 ms][INFO] === Request start === [2025-09-07 15:51:03][354255813628692][1 ms][DEBUG] START check_scloud [2025-09-07 15:51:03][354255813628692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:51:04][354255813628692][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 17597 5008 24653512 218184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:51:04][354255813628692][315 ms][DEBUG] targetPkg: running [2025-09-07 15:51:04][354255813628692][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 15:51:04][354255813628692][315 ms][DEBUG] START check_boot_completed [2025-09-07 15:51:04][354255813628692][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:51:04][354255813628692][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:51:04][354255813628692][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:51:04][354255813628692][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:51:04][354255813628692][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:51:04][354255813628692][423 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:51:04][354255813628692][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813628692\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2157\"}'\'' -e'"" [2025-09-07 15:51:04][354255813628692][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:51:04][354255813628692][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813628692\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2157\"}'\'' -e'"" [2025-09-07 15:51:07][354255813628692][3829 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14308140-94c0-49b6-bb30-9dae14c4d63e","id":"QR_14308140-94c0-49b6-bb30-9dae14c4d63e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:51:07][354255813628692][3985 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=3343 [2025-09-07 15:51:07][354255813628692][3985 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-07 15:51:07][354255813628692][3985 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:51:10][354255813628692][0 ms][INFO] === Request start === [2025-09-07 15:51:10][354255813628692][1 ms][DEBUG] START check_scloud [2025-09-07 15:51:10][354255813628692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:51:10][354255813628692][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 17597 5008 24830864 229984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:51:10][354255813628692][258 ms][DEBUG] targetPkg: running [2025-09-07 15:51:10][354255813628692][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 15:51:10][354255813628692][258 ms][DEBUG] START check_boot_completed [2025-09-07 15:51:10][354255813628692][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:51:10][354255813628692][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:51:10][354255813628692][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:51:10][354255813628692][352 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 15:51:10][354255813628692][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:51:10][354255813628692][352 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:51:10][354255813628692][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813628692\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6091\"}'\'' -e'"" [2025-09-07 15:51:10][354255813628692][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:51:10][354255813628692][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813628692\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6091\"}'\'' -e'"" [2025-09-07 15:51:15][354255813628692][5007 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb4b4eb8-f509-4b23-9729-df324eb8afb8","id":"QR_eb4b4eb8-f509-4b23-9729-df324eb8afb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:51:15][354255813628692][5163 ms][DEBUG] proc_open done in 4810 ms; code=255; res.len=3343 [2025-09-07 15:51:15][354255813628692][5163 ms][DEBUG] END runCmdUntilRes#1 in 4810 ms [2025-09-07 15:51:15][354255813628692][5163 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:52:03][353684143555260][0 ms][INFO] === Request start === [2025-09-07 15:52:03][353684143555260][1 ms][DEBUG] START check_scloud [2025-09-07 15:52:03][353684143555260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:52:04][353684143555260][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 17597 5008 24930260 241960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:52:04][353684143555260][311 ms][DEBUG] targetPkg: running [2025-09-07 15:52:04][353684143555260][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 15:52:04][353684143555260][311 ms][DEBUG] START check_boot_completed [2025-09-07 15:52:04][353684143555260][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:52:04][353684143555260][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:52:04][353684143555260][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:52:04][353684143555260][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:52:04][353684143555260][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:52:04][353684143555260][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:52:04][353684143555260][530 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30544 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1581\nsuccessfulTxPacketsPerSecond: 0.45489258558289336\nretriedTxPackets: 274\nretriedTxPacketsPerSecond: 0.1294949696184879\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1556\nsuccessfulRxPacketsPerSecond: 0.3884849088554637\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:52:04][353684143555260][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:52:04][353684143555260][967 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.126/290.126/290.126/0.000 ms\n [2025-09-07 15:52:04][353684143555260][967 ms][DEBUG] check_internet: online [2025-09-07 15:52:04][353684143555260][968 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:52:04][353684143555260][968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143555260\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8088\"}'\'' -e'"" [2025-09-07 15:52:04][353684143555260][968 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:52:04][353684143555260][968 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143555260\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8088\"}'\'' -e'"" [2025-09-07 15:52:12][353684143555260][9091 ms][DEBUG] proc_open done in 8123 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 15:52:12][353684143555260][9091 ms][DEBUG] END runCmdUntilRes#1 in 8123 ms [2025-09-07 15:52:12][353684143555260][9091 ms][WARN] Detected error: Process with pid 17597 either refused to load frida-agent, or terminated during injectionProcess with pid 17597 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 15:52:12][353684143555260][9091 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:52:13][353684143555260][9575 ms][DEBUG] SU: done in 484 ms; out [2025-09-07 15:52:13][353684143555260][9575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 15:52:13][353684143555260][10059 ms][DEBUG] SU: done in 484 ms; out [2025-09-07 15:52:13][353684143555260][10059 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 15:52:13][353684143555260][10059 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:52:14][353684143555260][10246 ms][DEBUG] SU: done in 187 ms; out [2025-09-07 15:52:14][353684143555260][10247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:52:14][353684143555260][10543 ms][DEBUG] SU: done in 297 ms; out [2025-09-07 15:52:16][353684143555260][12558 ms][DEBUG] START check_boot_completed [2025-09-07 15:52:16][353684143555260][12559 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:52:16][353684143555260][12605 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:52:16][353684143555260][12605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:52:16][353684143555260][12668 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:52:16][353684143555260][12668 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 15:52:19][353684143555260][15682 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 15:52:19][353684143555260][15683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143555260\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8088\"}'\'' -e'"" [2025-09-07 15:52:21][353684143555260][17214 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 15:52:21][353684143555260][17214 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-09-07 15:52:21][353684143555260][17214 ms][WARN] Detected error 2; Reboot the device [2025-09-07 15:52:21][353684143555260][17214 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:52:21][353684143555260][17479 ms][DEBUG] SU: done in 265 ms; outsystem 19329 18987 7990892 158076 futex_wait_queue_me 0 S system_server\n [2025-09-07 15:52:21][353684143555260][17479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 15:52:22][353684143555260][18151 ms][DEBUG] SU: done in 671 ms; out [2025-09-07 15:53:03][353684143555260][1 ms][INFO] === Request start === [2025-09-07 15:53:03][353684143555260][1 ms][DEBUG] START check_scloud [2025-09-07 15:53:03][353684143555260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:53:03][353684143555260][30 ms][DEBUG] SU: done in 29 ms; out [2025-09-07 15:53:03][353684143555260][30 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 15:53:03][353684143555260][61 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 15:53:03][353684143555260][61 ms][WARN] check_devices: no device [2025-09-07 15:53:03][353684143555260][61 ms][WARN] check_devices: no device [2025-09-07 15:53:03][353684143555260][61 ms][DEBUG] END check_scloud in 60 ms [2025-09-07 15:54:03][353684143555260][1 ms][INFO] === Request start === [2025-09-07 15:54:03][353684143555260][1 ms][DEBUG] START check_scloud [2025-09-07 15:54:03][353684143555260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:54:03][353684143555260][397 ms][DEBUG] SU: done in 396 ms; out [2025-09-07 15:54:03][353684143555260][397 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 15:54:03][353684143555260][441 ms][DEBUG] ADB: done in 45 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 15:54:03][353684143555260][442 ms][DEBUG] check_devices: device found [2025-09-07 15:54:03][353684143555260][442 ms][WARN] targetPkg: not running, restarting [2025-09-07 15:54:03][353684143555260][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:54:04][353684143555260][629 ms][DEBUG] SU: done in 187 ms; out [2025-09-07 15:54:04][353684143555260][629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:54:04][353684143555260][910 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 15:54:06][353684143555260][2925 ms][DEBUG] END check_scloud in 2924 ms [2025-09-07 15:54:06][353684143555260][2925 ms][DEBUG] START check_boot_completed [2025-09-07 15:54:06][353684143555260][2925 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:54:06][353684143555260][2972 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:54:06][353684143555260][2972 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:54:06][353684143555260][3035 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 15:54:06][353684143555260][3035 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 15:54:06][353684143555260][3035 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:54:06][353684143555260][3253 ms][DEBUG] SU: done in 218 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:54:06][353684143555260][3253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:54:07][353684143555260][4112 ms][DEBUG] SU: done in 859 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.062/221.062/221.062/0.000 ms\n [2025-09-07 15:54:07][353684143555260][4113 ms][DEBUG] check_internet: online [2025-09-07 15:54:07][353684143555260][4113 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:54:07][353684143555260][4113 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143555260\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2969\"}'\'' -e'"" [2025-09-07 15:54:07][353684143555260][4113 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:54:07][353684143555260][4113 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143555260\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2969\"}'\'' -e'"" [2025-09-07 15:54:15][353684143555260][11642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10cb0ab5-2210-48ab-9a3b-5395bcd3c04a","id":"QR_10cb0ab5-2210-48ab-9a3b-5395bcd3c04a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:54:15][353684143555260][11798 ms][DEBUG] proc_open done in 7685 ms; code=255; res.len=3343 [2025-09-07 15:54:15][353684143555260][11798 ms][DEBUG] END runCmdUntilRes#1 in 7685 ms [2025-09-07 15:54:15][353684143555260][11798 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:54:17][353684143555260][0 ms][INFO] === Request start === [2025-09-07 15:54:17][353684143555260][1 ms][DEBUG] START check_scloud [2025-09-07 15:54:17][353684143555260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:54:17][353684143555260][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 11329 5010 23782912 111796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:54:17][353684143555260][338 ms][DEBUG] targetPkg: running [2025-09-07 15:54:17][353684143555260][338 ms][DEBUG] END check_scloud in 337 ms [2025-09-07 15:54:17][353684143555260][338 ms][DEBUG] START check_boot_completed [2025-09-07 15:54:17][353684143555260][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:54:17][353684143555260][384 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:54:17][353684143555260][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:54:18][353684143555260][447 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:54:18][353684143555260][447 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:54:18][353684143555260][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:54:18][353684143555260][572 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:54:18][353684143555260][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:54:18][353684143555260][947 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.259/220.259/220.259/0.000 ms\n [2025-09-07 15:54:18][353684143555260][947 ms][DEBUG] check_internet: online [2025-09-07 15:54:18][353684143555260][947 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:54:18][353684143555260][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143555260\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9784\"}'\'' -e'"" [2025-09-07 15:54:18][353684143555260][947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:54:18][353684143555260][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143555260\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9784\"}'\'' -e'"" [2025-09-07 15:54:24][353684143555260][6648 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19e275f8-f747-4270-b08f-fb260914ce03","id":"QR_19e275f8-f747-4270-b08f-fb260914ce03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:54:24][353684143555260][6805 ms][DEBUG] proc_open done in 5857 ms; code=255; res.len=3343 [2025-09-07 15:54:24][353684143555260][6805 ms][DEBUG] END runCmdUntilRes#1 in 5857 ms [2025-09-07 15:54:24][353684143555260][6805 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:56:05][353313360872659][1 ms][INFO] === Request start === [2025-09-07 15:56:05][353313360872659][1 ms][DEBUG] START check_scloud [2025-09-07 15:56:05][353313360872659][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:56:05][353313360872659][371 ms][DEBUG] SU: done in 370 ms; outu0_a118 11329 5010 23811472 74032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:56:05][353313360872659][372 ms][DEBUG] targetPkg: running [2025-09-07 15:56:05][353313360872659][372 ms][DEBUG] END check_scloud in 371 ms [2025-09-07 15:56:05][353313360872659][372 ms][DEBUG] START check_boot_completed [2025-09-07 15:56:05][353313360872659][372 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:56:05][353313360872659][418 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:56:05][353313360872659][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:56:05][353313360872659][465 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:56:05][353313360872659][465 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:56:05][353313360872659][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:56:05][353313360872659][590 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:56:05][353313360872659][590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:56:06][353313360872659][949 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.268/258.268/258.268/0.000 ms\n [2025-09-07 15:56:06][353313360872659][949 ms][DEBUG] check_internet: online [2025-09-07 15:56:06][353313360872659][950 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:56:06][353313360872659][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360872659\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5474\"}'\'' -e'"" [2025-09-07 15:56:06][353313360872659][950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:56:06][353313360872659][950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360872659\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5474\"}'\'' -e'"" [2025-09-07 15:56:13][353313360872659][7791 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa87d8cf-0377-4e0c-b673-b51521bea95d","id":"QR_fa87d8cf-0377-4e0c-b673-b51521bea95d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:56:13][353313360872659][7948 ms][DEBUG] proc_open done in 6998 ms; code=255; res.len=3343 [2025-09-07 15:56:13][353313360872659][7948 ms][DEBUG] END runCmdUntilRes#1 in 6998 ms [2025-09-07 15:56:13][353313360872659][7948 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:56:16][353313360872659][0 ms][INFO] === Request start === [2025-09-07 15:56:16][353313360872659][1 ms][DEBUG] START check_scloud [2025-09-07 15:56:16][353313360872659][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:56:17][353313360872659][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 11329 5010 23939672 83800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:56:17][353313360872659][326 ms][DEBUG] targetPkg: running [2025-09-07 15:56:17][353313360872659][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-07 15:56:17][353313360872659][326 ms][DEBUG] START check_boot_completed [2025-09-07 15:56:17][353313360872659][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:56:17][353313360872659][373 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:56:17][353313360872659][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:56:17][353313360872659][435 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:56:17][353313360872659][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:56:17][353313360872659][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:56:17][353313360872659][560 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:56:17][353313360872659][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:56:17][353313360872659][966 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.154/261.154/261.154/0.000 ms\n [2025-09-07 15:56:17][353313360872659][966 ms][DEBUG] check_internet: online [2025-09-07 15:56:17][353313360872659][966 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:56:17][353313360872659][966 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360872659\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2540\"}'\'' -e'"" [2025-09-07 15:56:17][353313360872659][967 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:56:17][353313360872659][967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360872659\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2540\"}'\'' -e'"" [2025-09-07 15:56:21][353313360872659][5090 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24f8f4bd-a54f-49da-8df8-6ab8aaa71b75","id":"QR_24f8f4bd-a54f-49da-8df8-6ab8aaa71b75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:56:21][353313360872659][5246 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-09-07 15:56:21][353313360872659][5246 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-07 15:56:21][353313360872659][5246 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:56:24][353682263197681][0 ms][INFO] === Request start === [2025-09-07 15:56:24][353682263197681][1 ms][DEBUG] START check_scloud [2025-09-07 15:56:24][353682263197681][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:56:25][353682263197681][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 11329 5010 24076192 100268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:56:25][353682263197681][290 ms][DEBUG] targetPkg: running [2025-09-07 15:56:25][353682263197681][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-07 15:56:25][353682263197681][290 ms][DEBUG] START check_boot_completed [2025-09-07 15:56:25][353682263197681][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:56:25][353682263197681][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:56:25][353682263197681][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:56:25][353682263197681][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:56:25][353682263197681][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:56:25][353682263197681][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:56:25][353682263197681][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:56:25][353682263197681][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:56:25][353682263197681][914 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.757/298.757/298.757/0.000 ms\n [2025-09-07 15:56:25][353682263197681][914 ms][DEBUG] check_internet: online [2025-09-07 15:56:25][353682263197681][914 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:56:25][353682263197681][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353682263197681\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8888\"}'\'' -e'"" [2025-09-07 15:56:25][353682263197681][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:56:25][353682263197681][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353682263197681\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8888\"}'\'' -e'"" [2025-09-07 15:56:30][353682263197681][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9271a4a-7106-4ace-aa87-0699c7ad4ab3","id":"QR_d9271a4a-7106-4ace-aa87-0699c7ad4ab3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:56:30][353682263197681][5913 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-07 15:56:30][353682263197681][5913 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-07 15:56:30][353682263197681][5913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:56:34][353682263197681][0 ms][INFO] === Request start === [2025-09-07 15:56:34][353682263197681][1 ms][DEBUG] START check_scloud [2025-09-07 15:56:34][353682263197681][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:56:34][353682263197681][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 11329 5010 24216580 112228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:56:34][353682263197681][259 ms][DEBUG] targetPkg: running [2025-09-07 15:56:34][353682263197681][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 15:56:34][353682263197681][259 ms][DEBUG] START check_boot_completed [2025-09-07 15:56:34][353682263197681][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:56:34][353682263197681][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:56:34][353682263197681][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:56:34][353682263197681][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:56:34][353682263197681][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:56:34][353682263197681][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:56:34][353682263197681][462 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:56:34][353682263197681][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:56:35][353682263197681][853 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.729/293.729/293.729/0.000 ms\n [2025-09-07 15:56:35][353682263197681][853 ms][DEBUG] check_internet: online [2025-09-07 15:56:35][353682263197681][853 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:56:35][353682263197681][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353682263197681\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8247\"}'\'' -e'"" [2025-09-07 15:56:35][353682263197681][853 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:56:35][353682263197681][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353682263197681\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8247\"}'\'' -e'"" [2025-09-07 15:56:38][353682263197681][4477 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2cb8a961-9217-487c-ad3b-cbde4d57f64d","id":"QR_2cb8a961-9217-487c-ad3b-cbde4d57f64d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:56:38][353682263197681][4633 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=3343 [2025-09-07 15:56:38][353682263197681][4633 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-07 15:56:38][353682263197681][4633 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:57:04][356350641878227][0 ms][INFO] === Request start === [2025-09-07 15:57:04][356350641878227][1 ms][DEBUG] START check_scloud [2025-09-07 15:57:04][356350641878227][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:57:04][356350641878227][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 11329 5010 24309792 123148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:57:04][356350641878227][323 ms][DEBUG] targetPkg: running [2025-09-07 15:57:04][356350641878227][323 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 15:57:04][356350641878227][323 ms][DEBUG] START check_boot_completed [2025-09-07 15:57:04][356350641878227][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:57:04][356350641878227][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:57:04][356350641878227][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:57:04][356350641878227][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:57:04][356350641878227][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:57:04][356350641878227][432 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:57:04][356350641878227][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641878227\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-09-07 15:57:04][356350641878227][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:57:04][356350641878227][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641878227\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-09-07 15:57:08][356350641878227][3978 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_369f4cb6-72dd-4b69-810b-211ae27a7da9","id":"QR_369f4cb6-72dd-4b69-810b-211ae27a7da9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:57:08][356350641878227][4134 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-07 15:57:08][356350641878227][4134 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-07 15:57:08][356350641878227][4134 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:57:10][356350641878227][0 ms][INFO] === Request start === [2025-09-07 15:57:10][356350641878227][1 ms][DEBUG] START check_scloud [2025-09-07 15:57:10][356350641878227][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:57:10][356350641878227][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 11329 5010 24431784 135116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:57:10][356350641878227][295 ms][DEBUG] targetPkg: running [2025-09-07 15:57:10][356350641878227][295 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 15:57:10][356350641878227][296 ms][DEBUG] START check_boot_completed [2025-09-07 15:57:10][356350641878227][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:57:10][356350641878227][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:57:10][356350641878227][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:57:10][356350641878227][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:57:10][356350641878227][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:57:10][356350641878227][389 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:57:10][356350641878227][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641878227\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9332\"}'\'' -e'"" [2025-09-07 15:57:10][356350641878227][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:57:10][356350641878227][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641878227\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9332\"}'\'' -e'"" [2025-09-07 15:57:16][356350641878227][5997 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b359e9e-e459-4a28-ba29-84c73a9af58e","id":"QR_3b359e9e-e459-4a28-ba29-84c73a9af58e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:57:16][356350641878227][6153 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-09-07 15:57:16][356350641878227][6153 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-09-07 15:57:16][356350641878227][6153 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:57:20][358104901591121][0 ms][INFO] === Request start === [2025-09-07 15:57:20][358104901591121][1 ms][DEBUG] START check_scloud [2025-09-07 15:57:20][358104901591121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:57:21][358104901591121][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 11329 5010 24609072 146000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:57:21][358104901591121][311 ms][DEBUG] targetPkg: running [2025-09-07 15:57:21][358104901591121][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 15:57:21][358104901591121][311 ms][DEBUG] START check_boot_completed [2025-09-07 15:57:21][358104901591121][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:57:21][358104901591121][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:57:21][358104901591121][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:57:21][358104901591121][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 15:57:21][358104901591121][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 15:57:21][358104901591121][420 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:57:21][358104901591121][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901591121\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1844\"}'\'' -e'"" [2025-09-07 15:57:21][358104901591121][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:57:21][358104901591121][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901591121\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1844\"}'\'' -e'"" [2025-09-07 15:57:25][358104901591121][4310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd500351-900d-420f-ab82-9762d79b223b","id":"QR_bd500351-900d-420f-ab82-9762d79b223b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:57:25][358104901591121][4466 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-07 15:57:25][358104901591121][4466 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-07 15:57:25][358104901591121][4466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:57:27][358104901591121][0 ms][INFO] === Request start === [2025-09-07 15:57:27][358104901591121][1 ms][DEBUG] START check_scloud [2025-09-07 15:57:27][358104901591121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:57:27][358104901591121][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 11329 5010 24747540 156724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:57:27][358104901591121][254 ms][DEBUG] targetPkg: running [2025-09-07 15:57:27][358104901591121][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-07 15:57:27][358104901591121][254 ms][DEBUG] START check_boot_completed [2025-09-07 15:57:27][358104901591121][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:57:27][358104901591121][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 15:57:27][358104901591121][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:57:27][358104901591121][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:57:27][358104901591121][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 15:57:27][358104901591121][332 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:57:27][358104901591121][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901591121\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4281\"}'\'' -e'"" [2025-09-07 15:57:27][358104901591121][332 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:57:27][358104901591121][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104901591121\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4281\"}'\'' -e'"" [2025-09-07 15:57:32][358104901591121][5237 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f39f27d2-e52d-4525-8f5c-9b5d23b9769a","id":"QR_f39f27d2-e52d-4525-8f5c-9b5d23b9769a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:57:32][358104901591121][5393 ms][DEBUG] proc_open done in 5060 ms; code=255; res.len=3343 [2025-09-07 15:57:32][358104901591121][5393 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-07 15:57:33][358104901591121][5393 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:58:03][352887810693733][0 ms][INFO] === Request start === [2025-09-07 15:58:03][352887810693733][1 ms][DEBUG] START check_scloud [2025-09-07 15:58:03][352887810693733][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:58:03][352887810693733][292 ms][DEBUG] SU: done in 292 ms; outu0_a118 11329 5010 24855088 166624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:58:03][352887810693733][292 ms][DEBUG] targetPkg: running [2025-09-07 15:58:03][352887810693733][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-07 15:58:03][352887810693733][293 ms][DEBUG] START check_boot_completed [2025-09-07 15:58:03][352887810693733][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:58:03][352887810693733][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:58:03][352887810693733][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:58:03][352887810693733][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:58:03][352887810693733][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:58:03][352887810693733][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:58:03][352887810693733][511 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:58:03][352887810693733][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:58:04][352887810693733][933 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=281 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 281.370/281.370/281.370/0.000 ms\n [2025-09-07 15:58:04][352887810693733][933 ms][DEBUG] check_internet: online [2025-09-07 15:58:04][352887810693733][933 ms][DEBUG] rawBody.length=1150 [2025-09-07 15:58:04][352887810693733][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887810693733\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6662\"}'\'' -e'"" [2025-09-07 15:58:04][352887810693733][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:58:04][352887810693733][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887810693733\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6662\"}'\'' -e'"" [2025-09-07 15:58:07][352887810693733][4151 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_364888c4-364e-4e85-a46f-bfe9429715d5","id":"QR_364888c4-364e-4e85-a46f-bfe9429715d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:58:07][352887810693733][4307 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=3343 [2025-09-07 15:58:07][352887810693733][4307 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-09-07 15:58:07][352887810693733][4307 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 15:58:10][352887810693733][1 ms][INFO] === Request start === [2025-09-07 15:58:10][352887810693733][1 ms][DEBUG] START check_scloud [2025-09-07 15:58:10][352887810693733][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 15:58:10][352887810693733][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11329 5010 25013560 175668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 15:58:10][352887810693733][308 ms][DEBUG] targetPkg: running [2025-09-07 15:58:10][352887810693733][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 15:58:10][352887810693733][308 ms][DEBUG] START check_boot_completed [2025-09-07 15:58:10][352887810693733][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:58:10][352887810693733][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 15:58:10][352887810693733][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:58:10][352887810693733][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:58:10][352887810693733][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 15:58:10][352887810693733][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 15:58:10][352887810693733][511 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 304\nsuccessfulTxPacketsPerSecond: 8.92365206899176\nretriedTxPackets: 35\nretriedTxPacketsPerSecond: 1.1015699865171968\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 253\nsuccessfulRxPacketsPerSecond: 5.997385124582304\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 15:58:10][352887810693733][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 15:58:10][352887810693733][948 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=338 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 338.654/338.654/338.654/0.000 ms\n [2025-09-07 15:58:10][352887810693733][948 ms][DEBUG] check_internet: online [2025-09-07 15:58:10][352887810693733][948 ms][DEBUG] rawBody.length=1160 [2025-09-07 15:58:10][352887810693733][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887810693733\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8654\"}'\'' -e'"" [2025-09-07 15:58:10][352887810693733][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 15:58:10][352887810693733][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887810693733\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8654\"}'\'' -e'"" [2025-09-07 15:58:15][352887810693733][5291 ms][DEBUG] proc_open done in 4343 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 15:58:15][352887810693733][5291 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-09-07 15:58:15][352887810693733][5291 ms][WARN] Detected error: Process with pid 11329 either refused to load frida-agent, or terminated during injectionProcess with pid 11329 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 15:58:15][352887810693733][5291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 15:58:15][352887810693733][5557 ms][DEBUG] SU: done in 265 ms; outsystem 5432 5010 13057324 559088 ep_poll 0 S system_server\n [2025-09-07 15:58:15][352887810693733][5557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 15:58:15][352887810693733][5697 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 15:58:15][352887810693733][5698 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 15:58:15][352887810693733][5698 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 15:58:15][352887810693733][5823 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 15:58:15][352887810693733][5823 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 15:58:16][352887810693733][5979 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 15:58:18][352887810693733][7994 ms][DEBUG] START check_boot_completed [2025-09-07 15:58:18][352887810693733][7994 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 15:58:18][352887810693733][8040 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 15:58:18][352887810693733][8040 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 15:58:18][352887810693733][8087 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 15:58:18][352887810693733][8087 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 15:58:21][352887810693733][11102 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 15:58:21][352887810693733][11102 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887810693733\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8654\"}'\'' -e'"" [2025-09-07 15:58:26][352887810693733][16132 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_baf59bbb-7943-4129-aa29-ec852d789297","id":"QR_baf59bbb-7943-4129-aa29-ec852d789297","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 15:58:26][352887810693733][16289 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 15:58:26][352887810693733][16289 ms][DEBUG] END runCmdUntilRes#2 in 5187 ms [2025-09-07 15:58:26][352887810693733][16289 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:00:05][350616259745882][0 ms][INFO] === Request start === [2025-09-07 16:00:05][350616259745882][1 ms][DEBUG] START check_scloud [2025-09-07 16:00:05][350616259745882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:00:05][350616259745882][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 18154 5010 23715992 126956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:00:05][350616259745882][283 ms][DEBUG] targetPkg: running [2025-09-07 16:00:05][350616259745882][283 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 16:00:05][350616259745882][283 ms][DEBUG] START check_boot_completed [2025-09-07 16:00:05][350616259745882][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:00:05][350616259745882][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:00:05][350616259745882][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:00:05][350616259745882][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:00:05][350616259745882][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:00:05][350616259745882][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:00:05][350616259745882][471 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1297\nsuccessfulTxPacketsPerSecond: 3.618329956711219\nretriedTxPackets: 176\nretriedTxPacketsPerSecond: 0.5137809908321066\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1220\nsuccessfulRxPacketsPerSecond: 3.5235901995365038\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:00:05][350616259745882][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:00:06][350616259745882][1160 ms][DEBUG] SU: done in 689 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.435/301.435/301.435/0.000 ms\n [2025-09-07 16:00:06][350616259745882][1160 ms][DEBUG] check_internet: online [2025-09-07 16:00:06][350616259745882][1161 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:00:06][350616259745882][1161 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616259745882\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8243\"}'\'' -e'"" [2025-09-07 16:00:06][350616259745882][1161 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:00:06][350616259745882][1161 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616259745882\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8243\"}'\'' -e'"" [2025-09-07 16:00:12][350616259745882][6829 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d84e026-4f09-4a59-a6e0-53eb321a3b8f","id":"QR_9d84e026-4f09-4a59-a6e0-53eb321a3b8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:00:12][350616259745882][6985 ms][DEBUG] proc_open done in 5824 ms; code=255; res.len=3343 [2025-09-07 16:00:12][350616259745882][6985 ms][DEBUG] END runCmdUntilRes#1 in 5824 ms [2025-09-07 16:00:12][350616259745882][6985 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:05:03][355045115127975][1 ms][INFO] === Request start === [2025-09-07 16:05:03][355045115127975][1 ms][DEBUG] START check_scloud [2025-09-07 16:05:03][355045115127975][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:05:03][355045115127975][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18154 5010 23834864 137632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:05:03][355045115127975][311 ms][DEBUG] targetPkg: running [2025-09-07 16:05:03][355045115127975][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 16:05:03][355045115127975][311 ms][DEBUG] START check_boot_completed [2025-09-07 16:05:03][355045115127975][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:05:03][355045115127975][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:05:03][355045115127975][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:05:03][355045115127975][405 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 16:05:03][355045115127975][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:05:03][355045115127975][405 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:05:03][355045115127975][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045115127975\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7493\"}'\'' -e'"" [2025-09-07 16:05:03][355045115127975][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:05:03][355045115127975][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045115127975\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7493\"}'\'' -e'"" [2025-09-07 16:05:08][355045115127975][5247 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9897f6d5-826c-40c9-81d2-fe4a24c93c0a","id":"QR_9897f6d5-826c-40c9-81d2-fe4a24c93c0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:05:08][355045115127975][5403 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-07 16:05:08][355045115127975][5404 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-07 16:05:08][355045115127975][5404 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:05:11][355045115127975][0 ms][INFO] === Request start === [2025-09-07 16:05:11][355045115127975][1 ms][DEBUG] START check_scloud [2025-09-07 16:05:11][355045115127975][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:05:11][355045115127975][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 18154 5010 24016248 149512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:05:11][355045115127975][245 ms][DEBUG] targetPkg: running [2025-09-07 16:05:11][355045115127975][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-07 16:05:11][355045115127975][245 ms][DEBUG] START check_boot_completed [2025-09-07 16:05:11][355045115127975][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:05:11][355045115127975][290 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 16:05:11][355045115127975][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:05:11][355045115127975][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:05:11][355045115127975][337 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 16:05:11][355045115127975][337 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:05:11][355045115127975][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045115127975\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5109\"}'\'' -e'"" [2025-09-07 16:05:11][355045115127975][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:05:11][355045115127975][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045115127975\",\"model\":\"SM-N770F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5109\"}'\'' -e'"" [2025-09-07 16:05:17][355045115127975][5648 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cef70bb-9f19-4fab-9e95-fb1bd47507da","id":"QR_4cef70bb-9f19-4fab-9e95-fb1bd47507da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:05:17][355045115127975][5804 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-07 16:05:17][355045115127975][5804 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-07 16:05:17][355045115127975][5804 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:07:03][351978520269822][0 ms][INFO] === Request start === [2025-09-07 16:07:03][351978520269822][1 ms][DEBUG] START check_scloud [2025-09-07 16:07:03][351978520269822][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:07:03][351978520269822][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18154 5010 24147568 161212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:07:03][351978520269822][313 ms][DEBUG] targetPkg: running [2025-09-07 16:07:03][351978520269822][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 16:07:03][351978520269822][313 ms][DEBUG] START check_boot_completed [2025-09-07 16:07:03][351978520269822][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:07:03][351978520269822][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:07:03][351978520269822][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:07:03][351978520269822][438 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 16:07:03][351978520269822][438 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 16:07:03][351978520269822][438 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:07:03][351978520269822][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520269822\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3590\"}'\'' -e'"" [2025-09-07 16:07:03][351978520269822][438 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:07:03][351978520269822][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520269822\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3590\"}'\'' -e'"" [2025-09-07 16:07:08][351978520269822][5093 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93387213-6870-4fe4-beb3-d7f8d0678a1d","id":"QR_93387213-6870-4fe4-beb3-d7f8d0678a1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:07:08][351978520269822][5249 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 16:07:08][351978520269822][5249 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 16:07:08][351978520269822][5249 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:07:11][351978520269822][1 ms][INFO] === Request start === [2025-09-07 16:07:11][351978520269822][1 ms][DEBUG] START check_scloud [2025-09-07 16:07:11][351978520269822][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:07:11][351978520269822][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18154 5010 24296120 171876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:07:11][351978520269822][301 ms][DEBUG] targetPkg: running [2025-09-07 16:07:11][351978520269822][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 16:07:11][351978520269822][301 ms][DEBUG] START check_boot_completed [2025-09-07 16:07:11][351978520269822][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:07:11][351978520269822][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:07:11][351978520269822][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:07:11][351978520269822][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:07:11][351978520269822][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:07:11][351978520269822][410 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:07:11][351978520269822][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520269822\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5279\"}'\'' -e'"" [2025-09-07 16:07:11][351978520269822][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:07:11][351978520269822][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520269822\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5279\"}'\'' -e'"" [2025-09-07 16:07:16][351978520269822][5565 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5b37ea7-2da7-4641-be55-91f858519f08","id":"QR_d5b37ea7-2da7-4641-be55-91f858519f08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:07:16][351978520269822][5721 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 16:07:16][351978520269822][5721 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 16:07:16][351978520269822][5721 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:11:04][353809894372991][1 ms][INFO] === Request start === [2025-09-07 16:11:04][353809894372991][1 ms][DEBUG] START check_scloud [2025-09-07 16:11:04][353809894372991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:11:04][353809894372991][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 18154 5010 24405944 183324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:11:04][353809894372991][320 ms][DEBUG] targetPkg: running [2025-09-07 16:11:04][353809894372991][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 16:11:04][353809894372991][320 ms][DEBUG] START check_boot_completed [2025-09-07 16:11:04][353809894372991][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:11:04][353809894372991][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:11:04][353809894372991][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:11:04][353809894372991][399 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 16:11:04][353809894372991][399 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 16:11:04][353809894372991][399 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:11:04][353809894372991][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894372991\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4537\"}'\'' -e'"" [2025-09-07 16:11:04][353809894372991][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:11:04][353809894372991][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894372991\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4537\"}'\'' -e'"" [2025-09-07 16:11:09][353809894372991][5037 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46f3645c-6604-493a-a917-f527f3d3e00a","id":"QR_46f3645c-6604-493a-a917-f527f3d3e00a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:11:09][353809894372991][5193 ms][DEBUG] proc_open done in 4794 ms; code=255; res.len=3343 [2025-09-07 16:11:09][353809894372991][5193 ms][DEBUG] END runCmdUntilRes#1 in 4794 ms [2025-09-07 16:11:09][353809894372991][5193 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:11:11][353809894372991][0 ms][INFO] === Request start === [2025-09-07 16:11:11][353809894372991][1 ms][DEBUG] START check_scloud [2025-09-07 16:11:11][353809894372991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:11:11][353809894372991][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 18154 5010 24579136 193660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:11:11][353809894372991][290 ms][DEBUG] targetPkg: running [2025-09-07 16:11:11][353809894372991][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-07 16:11:11][353809894372991][290 ms][DEBUG] START check_boot_completed [2025-09-07 16:11:11][353809894372991][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:11:11][353809894372991][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:11:11][353809894372991][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:11:11][353809894372991][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:11:11][353809894372991][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:11:11][353809894372991][368 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:11:11][353809894372991][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894372991\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7293\"}'\'' -e'"" [2025-09-07 16:11:11][353809894372991][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:11:11][353809894372991][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894372991\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7293\"}'\'' -e'"" [2025-09-07 16:11:17][353809894372991][5538 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5291b0a7-3eb8-427f-b77c-2fa83abeb1ee","id":"QR_5291b0a7-3eb8-427f-b77c-2fa83abeb1ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:11:17][353809894372991][5695 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-07 16:11:17][353809894372991][5695 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-07 16:11:17][353809894372991][5695 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:11:21][357962506379684][0 ms][INFO] === Request start === [2025-09-07 16:11:21][357962506379684][1 ms][DEBUG] START check_scloud [2025-09-07 16:11:21][357962506379684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:11:21][357962506379684][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 18154 5010 24748168 192408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:11:21][357962506379684][316 ms][DEBUG] targetPkg: running [2025-09-07 16:11:21][357962506379684][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 16:11:21][357962506379684][316 ms][DEBUG] START check_boot_completed [2025-09-07 16:11:21][357962506379684][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:11:21][357962506379684][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:11:21][357962506379684][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:11:21][357962506379684][410 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 16:11:21][357962506379684][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:11:21][357962506379684][410 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:11:21][357962506379684][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506379684\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9512\"}'\'' -e'"" [2025-09-07 16:11:21][357962506379684][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:11:21][357962506379684][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506379684\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9512\"}'\'' -e'"" [2025-09-07 16:11:25][357962506379684][3752 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8eb1b6ff-38b5-4319-88db-a9b4b49c2ee9","id":"QR_8eb1b6ff-38b5-4319-88db-a9b4b49c2ee9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:11:25][357962506379684][3908 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=3343 [2025-09-07 16:11:25][357962506379684][3908 ms][DEBUG] END runCmdUntilRes#1 in 3498 ms [2025-09-07 16:11:25][357962506379684][3908 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:11:27][357962506379684][0 ms][INFO] === Request start === [2025-09-07 16:11:27][357962506379684][1 ms][DEBUG] START check_scloud [2025-09-07 16:11:27][357962506379684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:11:28][357962506379684][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 18154 5010 24888556 203208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:11:28][357962506379684][295 ms][DEBUG] targetPkg: running [2025-09-07 16:11:28][357962506379684][295 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 16:11:28][357962506379684][296 ms][DEBUG] START check_boot_completed [2025-09-07 16:11:28][357962506379684][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:11:28][357962506379684][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:11:28][357962506379684][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:11:28][357962506379684][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:11:28][357962506379684][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:11:28][357962506379684][389 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:11:28][357962506379684][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506379684\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6331\"}'\'' -e'"" [2025-09-07 16:11:28][357962506379684][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:11:28][357962506379684][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506379684\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6331\"}'\'' -e'"" [2025-09-07 16:11:33][357962506379684][5403 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f047d76-d20e-453e-b000-5c2dae607c2f","id":"QR_8f047d76-d20e-453e-b000-5c2dae607c2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:11:33][357962506379684][5559 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-07 16:11:33][357962506379684][5559 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-07 16:11:33][357962506379684][5559 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:12:03][352060483984348][1 ms][INFO] === Request start === [2025-09-07 16:12:03][352060483984348][1 ms][DEBUG] START check_scloud [2025-09-07 16:12:03][352060483984348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:12:03][352060483984348][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18154 5010 24979720 215480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:12:03][352060483984348][300 ms][DEBUG] targetPkg: running [2025-09-07 16:12:03][352060483984348][300 ms][DEBUG] END check_scloud in 298 ms [2025-09-07 16:12:03][352060483984348][300 ms][DEBUG] START check_boot_completed [2025-09-07 16:12:03][352060483984348][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:12:04][352060483984348][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:12:04][352060483984348][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:12:04][352060483984348][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:12:04][352060483984348][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:12:04][352060483984348][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:12:04][352060483984348][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1531\nsuccessfulTxPacketsPerSecond: 0.05377707099341615\nretriedTxPackets: 254\nretriedTxPacketsPerSecond: 0.046094632280070984\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1422\nsuccessfulRxPacketsPerSecond: 0.023047316140035492\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:12:04][352060483984348][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:12:05][352060483984348][1971 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.238/290.238/290.238/0.000 ms\n [2025-09-07 16:12:05][352060483984348][1971 ms][DEBUG] check_internet: online [2025-09-07 16:12:05][352060483984348][1971 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:12:05][352060483984348][1971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483984348\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5578\"}'\'' -e'"" [2025-09-07 16:12:05][352060483984348][1972 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:12:05][352060483984348][1972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483984348\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5578\"}'\'' -e'"" [2025-09-07 16:12:09][352060483984348][5689 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13d340b7-f6e3-4871-bc79-a0bfd54c7696","id":"QR_13d340b7-f6e3-4871-bc79-a0bfd54c7696","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:12:09][352060483984348][5845 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-07 16:12:09][352060483984348][5845 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-09-07 16:12:09][352060483984348][5845 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:12:11][352060483984348][1 ms][INFO] === Request start === [2025-09-07 16:12:11][352060483984348][1 ms][DEBUG] START check_scloud [2025-09-07 16:12:11][352060483984348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:12:12][352060483984348][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 18154 5010 25120144 227244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:12:12][352060483984348][259 ms][DEBUG] targetPkg: running [2025-09-07 16:12:12][352060483984348][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 16:12:12][352060483984348][260 ms][DEBUG] START check_boot_completed [2025-09-07 16:12:12][352060483984348][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:12:12][352060483984348][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:12:12][352060483984348][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:12:12][352060483984348][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:12:12][352060483984348][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:12:12][352060483984348][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:12:12][352060483984348][447 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1531\nsuccessfulTxPacketsPerSecond: 0.05377707099341615\nretriedTxPackets: 254\nretriedTxPacketsPerSecond: 0.046094632280070984\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1422\nsuccessfulRxPacketsPerSecond: 0.023047316140035492\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:12:12][352060483984348][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:12:12][352060483984348][869 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=331 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 331.977/331.977/331.977/0.000 ms\n [2025-09-07 16:12:12][352060483984348][869 ms][DEBUG] check_internet: online [2025-09-07 16:12:12][352060483984348][869 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:12:12][352060483984348][869 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483984348\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1258\"}'\'' -e'"" [2025-09-07 16:12:12][352060483984348][869 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:12:12][352060483984348][869 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483984348\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1258\"}'\'' -e'"" [2025-09-07 16:12:16][352060483984348][4961 ms][DEBUG] proc_open done in 4092 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 16:12:16][352060483984348][4962 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-07 16:12:16][352060483984348][4962 ms][WARN] Detected error: Process with pid 18154 either refused to load frida-agent, or terminated during injectionProcess with pid 18154 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 16:12:16][352060483984348][4962 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 16:12:17][352060483984348][5258 ms][DEBUG] SU: done in 296 ms; outsystem 5432 5010 12814316 254296 ep_poll 0 S system_server\n [2025-09-07 16:12:17][352060483984348][5258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 16:12:17][352060483984348][5399 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 16:12:17][352060483984348][5399 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 16:12:17][352060483984348][5399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 16:12:17][352060483984348][5524 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 16:12:17][352060483984348][5524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 16:12:17][352060483984348][5711 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 16:12:19][352060483984348][7726 ms][DEBUG] START check_boot_completed [2025-09-07 16:12:19][352060483984348][7726 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:12:19][352060483984348][7773 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:12:19][352060483984348][7773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:12:19][352060483984348][7851 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 16:12:19][352060483984348][7851 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 16:12:22][352060483984348][10866 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 16:12:22][352060483984348][10866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483984348\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1258\"}'\'' -e'"" [2025-09-07 16:12:28][352060483984348][16349 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f17eb8b-68cc-4ba9-a06a-960da1f704c1","id":"QR_2f17eb8b-68cc-4ba9-a06a-960da1f704c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:12:28][352060483984348][16505 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-09-07 16:12:28][352060483984348][16505 ms][DEBUG] END runCmdUntilRes#2 in 5640 ms [2025-09-07 16:12:28][352060483984348][16506 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:22:03][353310801229762][1 ms][INFO] === Request start === [2025-09-07 16:22:03][353310801229762][1 ms][DEBUG] START check_scloud [2025-09-07 16:22:03][353310801229762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:22:03][353310801229762][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 19821 5010 23678492 128304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:22:03][353310801229762][311 ms][DEBUG] targetPkg: running [2025-09-07 16:22:03][353310801229762][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 16:22:03][353310801229762][311 ms][DEBUG] START check_boot_completed [2025-09-07 16:22:03][353310801229762][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:22:03][353310801229762][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:22:03][353310801229762][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:22:03][353310801229762][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:22:03][353310801229762][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:22:03][353310801229762][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:22:03][353310801229762][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 0.04319051669147353\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.02657877950244525\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1569\nsuccessfulRxPacketsPerSecond: 0.03654582181586222\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:22:03][353310801229762][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:22:05][353310801229762][1841 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.310/306.310/306.310/0.000 ms\n [2025-09-07 16:22:05][353310801229762][1842 ms][DEBUG] check_internet: online [2025-09-07 16:22:05][353310801229762][1842 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:22:05][353310801229762][1842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801229762\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2604\"}'\'' -e'"" [2025-09-07 16:22:05][353310801229762][1842 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:22:05][353310801229762][1842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801229762\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2604\"}'\'' -e'"" [2025-09-07 16:22:09][353310801229762][5559 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9377aaba-ae62-490a-807f-bda577e4df79","id":"QR_9377aaba-ae62-490a-807f-bda577e4df79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:22:09][353310801229762][5715 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-07 16:22:09][353310801229762][5715 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-07 16:22:09][353310801229762][5716 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:22:11][353310801229762][0 ms][INFO] === Request start === [2025-09-07 16:22:11][353310801229762][1 ms][DEBUG] START check_scloud [2025-09-07 16:22:11][353310801229762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:22:11][353310801229762][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19821 5010 23828336 139148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:22:11][353310801229762][319 ms][DEBUG] targetPkg: running [2025-09-07 16:22:11][353310801229762][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 16:22:11][353310801229762][319 ms][DEBUG] START check_boot_completed [2025-09-07 16:22:11][353310801229762][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:22:11][353310801229762][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:22:11][353310801229762][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:22:11][353310801229762][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:22:11][353310801229762][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:22:11][353310801229762][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:22:12][353310801229762][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1706\nsuccessfulTxPacketsPerSecond: 0.04319051669147353\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.02657877950244525\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1569\nsuccessfulRxPacketsPerSecond: 0.03654582181586222\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:22:12][353310801229762][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:22:12][353310801229762][1022 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=342 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 342.138/342.138/342.138/0.000 ms\n [2025-09-07 16:22:12][353310801229762][1022 ms][DEBUG] check_internet: online [2025-09-07 16:22:12][353310801229762][1022 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:22:12][353310801229762][1023 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801229762\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8062\"}'\'' -e'"" [2025-09-07 16:22:12][353310801229762][1023 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:22:12][353310801229762][1023 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801229762\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8062\"}'\'' -e'"" [2025-09-07 16:22:17][353310801229762][6068 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3766e20e-eb1c-4031-a148-cd10e559b053","id":"QR_3766e20e-eb1c-4031-a148-cd10e559b053","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:22:17][353310801229762][6224 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 16:22:17][353310801229762][6224 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 16:22:17][353310801229762][6224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:24:04][350545469259618][1 ms][INFO] === Request start === [2025-09-07 16:24:04][350545469259618][1 ms][DEBUG] START check_scloud [2025-09-07 16:24:04][350545469259618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:24:05][350545469259618][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 19821 5010 23964464 150144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:24:05][350545469259618][284 ms][DEBUG] targetPkg: running [2025-09-07 16:24:05][350545469259618][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 16:24:05][350545469259618][284 ms][DEBUG] START check_boot_completed [2025-09-07 16:24:05][350545469259618][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:24:05][350545469259618][314 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 16:24:05][350545469259618][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:24:05][350545469259618][377 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 16:24:05][350545469259618][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:24:05][350545469259618][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:24:05][350545469259618][502 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.4979139124014903\nretriedTxPackets: 328\nretriedTxPacketsPerSecond: 0.15452500729701424\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1620\nsuccessfulRxPacketsPerSecond: 0.43782085400820697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:24:05][350545469259618][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:24:05][350545469259618][939 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=345 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 345.098/345.098/345.098/0.000 ms\n [2025-09-07 16:24:05][350545469259618][939 ms][DEBUG] check_internet: online [2025-09-07 16:24:05][350545469259618][939 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:24:05][350545469259618][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545469259618\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W30AXNDY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6752\"}'\'' -e'"" [2025-09-07 16:24:05][350545469259618][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:24:05][350545469259618][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545469259618\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W30AXNDY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6752\"}'\'' -e'"" [2025-09-07 16:24:10][350545469259618][5563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1a792b3-bbb7-4d49-9d3c-c243721ef62d","id":"QR_d1a792b3-bbb7-4d49-9d3c-c243721ef62d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:24:10][350545469259618][5719 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-07 16:24:10][350545469259618][5719 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-07 16:24:10][350545469259618][5719 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:24:13][355296340744114][0 ms][INFO] === Request start === [2025-09-07 16:24:13][355296340744114][1 ms][DEBUG] START check_scloud [2025-09-07 16:24:13][355296340744114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:24:14][355296340744114][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 19821 5010 24109048 161912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:24:14][355296340744114][315 ms][DEBUG] targetPkg: running [2025-09-07 16:24:14][355296340744114][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-07 16:24:14][355296340744114][315 ms][DEBUG] START check_boot_completed [2025-09-07 16:24:14][355296340744114][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:24:14][355296340744114][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:24:14][355296340744114][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:24:14][355296340744114][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:24:14][355296340744114][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:24:14][355296340744114][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:24:14][355296340744114][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.4979139124014903\nretriedTxPackets: 328\nretriedTxPacketsPerSecond: 0.15452500729701424\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1620\nsuccessfulRxPacketsPerSecond: 0.43782085400820697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:24:14][355296340744114][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:24:14][355296340744114][939 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.193/312.193/312.193/0.000 ms\n [2025-09-07 16:24:14][355296340744114][939 ms][DEBUG] check_internet: online [2025-09-07 16:24:14][355296340744114][940 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:24:14][355296340744114][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296340744114\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3724\"}'\'' -e'"" [2025-09-07 16:24:14][355296340744114][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:24:14][355296340744114][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296340744114\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3724\"}'\'' -e'"" [2025-09-07 16:24:20][355296340744114][6297 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14ac7c80-193f-4268-870c-594934806681","id":"QR_14ac7c80-193f-4268-870c-594934806681","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:24:20][355296340744114][6453 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-07 16:24:20][355296340744114][6453 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 16:24:20][355296340744114][6454 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:24:23][355296340744114][0 ms][INFO] === Request start === [2025-09-07 16:24:23][355296340744114][1 ms][DEBUG] START check_scloud [2025-09-07 16:24:23][355296340744114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:24:24][355296340744114][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 19821 5010 24245184 172632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:24:24][355296340744114][294 ms][DEBUG] targetPkg: running [2025-09-07 16:24:24][355296340744114][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-07 16:24:24][355296340744114][295 ms][DEBUG] START check_boot_completed [2025-09-07 16:24:24][355296340744114][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:24:24][355296340744114][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:24:24][355296340744114][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:24:24][355296340744114][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:24:24][355296340744114][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:24:24][355296340744114][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:24:24][355296340744114][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.4979139124014903\nretriedTxPackets: 328\nretriedTxPacketsPerSecond: 0.15452500729701424\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1620\nsuccessfulRxPacketsPerSecond: 0.43782085400820697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:24:24][355296340744114][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:24:24][355296340744114][935 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.953/299.953/299.953/0.000 ms\n [2025-09-07 16:24:24][355296340744114][935 ms][DEBUG] check_internet: online [2025-09-07 16:24:24][355296340744114][935 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:24:24][355296340744114][935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296340744114\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6150\"}'\'' -e'"" [2025-09-07 16:24:24][355296340744114][935 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:24:24][355296340744114][935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296340744114\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6150\"}'\'' -e'"" [2025-09-07 16:24:28][355296340744114][4387 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90773208-2bf5-455b-b23b-643195269994","id":"QR_90773208-2bf5-455b-b23b-643195269994","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:24:28][355296340744114][4543 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-07 16:24:28][355296340744114][4543 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-07 16:24:28][355296340744114][4544 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:25:03][352294625739159][0 ms][INFO] === Request start === [2025-09-07 16:25:03][352294625739159][1 ms][DEBUG] START check_scloud [2025-09-07 16:25:03][352294625739159][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:25:03][352294625739159][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19821 5010 24362396 184892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:25:03][352294625739159][315 ms][DEBUG] targetPkg: running [2025-09-07 16:25:03][352294625739159][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 16:25:03][352294625739159][315 ms][DEBUG] START check_boot_completed [2025-09-07 16:25:03][352294625739159][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:25:03][352294625739159][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:25:03][352294625739159][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:25:03][352294625739159][456 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 16:25:03][352294625739159][456 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 16:25:03][352294625739159][456 ms][DEBUG] rawBody.length=1149 [2025-09-07 16:25:03][352294625739159][456 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294625739159\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"NEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1077\"}'\'' -e'"" [2025-09-07 16:25:03][352294625739159][456 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:25:03][352294625739159][456 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294625739159\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"NEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1077\"}'\'' -e'"" [2025-09-07 16:25:07][352294625739159][3830 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb3e3467-b519-4ae9-a17b-862f04c6f1a5","id":"QR_fb3e3467-b519-4ae9-a17b-862f04c6f1a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:25:07][352294625739159][3986 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-07 16:25:07][352294625739159][3986 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-07 16:25:07][352294625739159][3986 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:25:09][352294625739159][0 ms][INFO] === Request start === [2025-09-07 16:25:09][352294625739159][1 ms][DEBUG] START check_scloud [2025-09-07 16:25:09][352294625739159][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:25:10][352294625739159][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 19821 5010 24544932 195536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:25:10][352294625739159][314 ms][DEBUG] targetPkg: running [2025-09-07 16:25:10][352294625739159][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 16:25:10][352294625739159][314 ms][DEBUG] START check_boot_completed [2025-09-07 16:25:10][352294625739159][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:25:10][352294625739159][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:25:10][352294625739159][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:25:10][352294625739159][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:25:10][352294625739159][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:25:10][352294625739159][407 ms][DEBUG] rawBody.length=1159 [2025-09-07 16:25:10][352294625739159][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294625739159\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"NEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5701\"}'\'' -e'"" [2025-09-07 16:25:10][352294625739159][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:25:10][352294625739159][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294625739159\",\"model\":\"SM-P619\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"NEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5701\"}'\'' -e'"" [2025-09-07 16:25:14][352294625739159][5109 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27a5a7bb-5391-41c9-9b50-4f4b631f8e1f","id":"QR_27a5a7bb-5391-41c9-9b50-4f4b631f8e1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:25:15][352294625739159][5266 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-07 16:25:15][352294625739159][5266 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-07 16:25:15][352294625739159][5266 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:25:19][354068191317915][0 ms][INFO] === Request start === [2025-09-07 16:25:19][354068191317915][1 ms][DEBUG] START check_scloud [2025-09-07 16:25:19][354068191317915][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:25:19][354068191317915][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 19821 5010 24718252 207376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:25:19][354068191317915][314 ms][DEBUG] targetPkg: running [2025-09-07 16:25:19][354068191317915][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 16:25:19][354068191317915][314 ms][DEBUG] START check_boot_completed [2025-09-07 16:25:19][354068191317915][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:25:19][354068191317915][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:25:19][354068191317915][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:25:19][354068191317915][408 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 16:25:19][354068191317915][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 16:25:19][354068191317915][408 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:25:19][354068191317915][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191317915\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4088\"}'\'' -e'"" [2025-09-07 16:25:19][354068191317915][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:25:19][354068191317915][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191317915\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4088\"}'\'' -e'"" [2025-09-07 16:25:24][354068191317915][4922 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36665a77-8f12-4d12-95ed-13542c509e32","id":"QR_36665a77-8f12-4d12-95ed-13542c509e32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:25:24][354068191317915][5078 ms][DEBUG] proc_open done in 4669 ms; code=255; res.len=3343 [2025-09-07 16:25:24][354068191317915][5078 ms][DEBUG] END runCmdUntilRes#1 in 4669 ms [2025-09-07 16:25:24][354068191317915][5078 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:25:26][354068191317915][0 ms][INFO] === Request start === [2025-09-07 16:25:26][354068191317915][1 ms][DEBUG] START check_scloud [2025-09-07 16:25:26][354068191317915][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:25:26][354068191317915][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 19821 5010 24881296 218420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:25:26][354068191317915][302 ms][DEBUG] targetPkg: running [2025-09-07 16:25:26][354068191317915][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 16:25:26][354068191317915][302 ms][DEBUG] START check_boot_completed [2025-09-07 16:25:26][354068191317915][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:25:27][354068191317915][347 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 16:25:27][354068191317915][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:25:27][354068191317915][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:25:27][354068191317915][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 16:25:27][354068191317915][394 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:25:27][354068191317915][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191317915\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1030\"}'\'' -e'"" [2025-09-07 16:25:27][354068191317915][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:25:27][354068191317915][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191317915\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1030\"}'\'' -e'"" [2025-09-07 16:25:32][354068191317915][5752 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2cd163e-b245-427b-864b-fe77ef533aff","id":"QR_a2cd163e-b245-427b-864b-fe77ef533aff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:25:32][354068191317915][5908 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-09-07 16:25:32][354068191317915][5908 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-07 16:25:32][354068191317915][5908 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:26:05][351864714373580][1 ms][INFO] === Request start === [2025-09-07 16:26:05][351864714373580][1 ms][DEBUG] START check_scloud [2025-09-07 16:26:05][351864714373580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:26:05][351864714373580][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 19821 5010 24974508 230408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:26:05][351864714373580][297 ms][DEBUG] targetPkg: running [2025-09-07 16:26:05][351864714373580][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 16:26:05][351864714373580][297 ms][DEBUG] START check_boot_completed [2025-09-07 16:26:05][351864714373580][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:26:05][351864714373580][343 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 16:26:05][351864714373580][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:26:05][351864714373580][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:26:05][351864714373580][405 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 16:26:05][351864714373580][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:26:05][351864714373580][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.4979139124014903\nretriedTxPackets: 328\nretriedTxPacketsPerSecond: 0.15452500729701424\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1620\nsuccessfulRxPacketsPerSecond: 0.43782085400820697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:26:05][351864714373580][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:26:07][351864714373580][1905 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.761/288.761/288.761/0.000 ms\n [2025-09-07 16:26:07][351864714373580][1905 ms][DEBUG] check_internet: online [2025-09-07 16:26:07][351864714373580][1905 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:26:07][351864714373580][1905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864714373580\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8491\"}'\'' -e'"" [2025-09-07 16:26:07][351864714373580][1905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:26:07][351864714373580][1905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864714373580\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8491\"}'\'' -e'"" [2025-09-07 16:26:11][351864714373580][6544 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4d30bdb-ca58-4e6e-9215-affa4952a452","id":"QR_d4d30bdb-ca58-4e6e-9215-affa4952a452","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:26:11][351864714373580][6700 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-07 16:26:11][351864714373580][6700 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-07 16:26:11][351864714373580][6700 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:26:15][351864714373580][0 ms][INFO] === Request start === [2025-09-07 16:26:15][351864714373580][1 ms][DEBUG] START check_scloud [2025-09-07 16:26:15][351864714373580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:26:15][351864714373580][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 19821 5010 25108792 241128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:26:15][351864714373580][304 ms][DEBUG] targetPkg: running [2025-09-07 16:26:15][351864714373580][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 16:26:15][351864714373580][304 ms][DEBUG] START check_boot_completed [2025-09-07 16:26:15][351864714373580][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:26:15][351864714373580][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:26:15][351864714373580][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:26:15][351864714373580][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:26:15][351864714373580][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:26:15][351864714373580][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:26:15][351864714373580][492 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.4979139124014903\nretriedTxPackets: 328\nretriedTxPacketsPerSecond: 0.15452500729701424\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1620\nsuccessfulRxPacketsPerSecond: 0.43782085400820697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:26:15][351864714373580][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:26:16][351864714373580][882 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.629/287.629/287.629/0.000 ms\n [2025-09-07 16:26:16][351864714373580][883 ms][DEBUG] check_internet: online [2025-09-07 16:26:16][351864714373580][883 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:26:16][351864714373580][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864714373580\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-07 16:26:16][351864714373580][883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:26:16][351864714373580][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864714373580\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-07 16:26:20][351864714373580][4631 ms][DEBUG] proc_open done in 3748 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 16:26:20][351864714373580][4631 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-07 16:26:20][351864714373580][4631 ms][WARN] Detected error: Process with pid 19821 either refused to load frida-agent, or terminated during injectionProcess with pid 19821 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 16:26:20][351864714373580][4631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 16:26:20][351864714373580][4930 ms][DEBUG] SU: done in 299 ms; outsystem 5432 5010 12831752 217488 ep_poll 0 S system_server\n [2025-09-07 16:26:20][351864714373580][4930 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 16:26:20][351864714373580][5069 ms][DEBUG] SU: done in 139 ms; out [2025-09-07 16:26:20][351864714373580][5069 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 16:26:20][351864714373580][5069 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 16:26:20][351864714373580][5194 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 16:26:20][351864714373580][5194 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 16:26:20][351864714373580][5351 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 16:26:22][351864714373580][7365 ms][DEBUG] START check_boot_completed [2025-09-07 16:26:22][351864714373580][7365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:26:22][351864714373580][7412 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:26:22][351864714373580][7412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:26:22][351864714373580][7459 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:26:22][351864714373580][7459 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:26:25][351864714373580][10474 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 16:26:25][351864714373580][10474 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864714373580\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-07 16:26:30][351864714373580][15223 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38ed7a69-561f-416f-9e9d-011ed88ba762","id":"QR_38ed7a69-561f-416f-9e9d-011ed88ba762","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:26:30][351864714373580][15379 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-07 16:26:30][351864714373580][15379 ms][DEBUG] END runCmdUntilRes#2 in 4905 ms [2025-09-07 16:26:30][351864714373580][15379 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:27:03][350536257725027][0 ms][INFO] === Request start === [2025-09-07 16:27:03][350536257725027][1 ms][DEBUG] START check_scloud [2025-09-07 16:27:03][350536257725027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:27:04][350536257725027][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21609 5010 23640792 127412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:27:04][350536257725027][305 ms][DEBUG] targetPkg: running [2025-09-07 16:27:04][350536257725027][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 16:27:04][350536257725027][305 ms][DEBUG] START check_boot_completed [2025-09-07 16:27:04][350536257725027][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:27:04][350536257725027][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:27:04][350536257725027][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:27:04][350536257725027][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:27:04][350536257725027][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:27:04][350536257725027][383 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:27:04][350536257725027][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257725027\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1069\"}'\'' -e'"" [2025-09-07 16:27:04][350536257725027][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:27:04][350536257725027][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257725027\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1069\"}'\'' -e'"" [2025-09-07 16:27:07][350536257725027][3850 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59594635-3a61-4a35-bb54-bb72c7dd0f1d","id":"QR_59594635-3a61-4a35-bb54-bb72c7dd0f1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:27:07][350536257725027][4007 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-09-07 16:27:07][350536257725027][4007 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-07 16:27:07][350536257725027][4007 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:27:10][350536257725027][0 ms][INFO] === Request start === [2025-09-07 16:27:10][350536257725027][1 ms][DEBUG] START check_scloud [2025-09-07 16:27:10][350536257725027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:27:10][350536257725027][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 21609 5010 23823320 138152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:27:10][350536257725027][313 ms][DEBUG] targetPkg: running [2025-09-07 16:27:10][350536257725027][313 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 16:27:10][350536257725027][313 ms][DEBUG] START check_boot_completed [2025-09-07 16:27:10][350536257725027][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:27:10][350536257725027][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:27:10][350536257725027][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:27:10][350536257725027][392 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 16:27:10][350536257725027][392 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 16:27:10][350536257725027][392 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:27:10][350536257725027][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257725027\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5261\"}'\'' -e'"" [2025-09-07 16:27:10][350536257725027][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:27:10][350536257725027][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257725027\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5261\"}'\'' -e'"" [2025-09-07 16:27:16][350536257725027][6015 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c5073f0-943d-46c2-80b1-2bf6c7436072","id":"QR_8c5073f0-943d-46c2-80b1-2bf6c7436072","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:27:16][350536257725027][6171 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-09-07 16:27:16][350536257725027][6171 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-09-07 16:27:16][350536257725027][6171 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:28:05][351672491096088][0 ms][INFO] === Request start === [2025-09-07 16:28:05][351672491096088][1 ms][DEBUG] START check_scloud [2025-09-07 16:28:05][351672491096088][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:28:05][351672491096088][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 21609 5010 23974936 149352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:28:05][351672491096088][260 ms][DEBUG] targetPkg: running [2025-09-07 16:28:05][351672491096088][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-07 16:28:05][351672491096088][260 ms][DEBUG] START check_boot_completed [2025-09-07 16:28:05][351672491096088][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:28:05][351672491096088][307 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:28:05][351672491096088][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:28:05][351672491096088][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:28:05][351672491096088][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:28:05][351672491096088][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:28:05][351672491096088][463 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2058\nsuccessfulTxPacketsPerSecond: 0.9646049057049491\nretriedTxPackets: 417\nretriedTxPacketsPerSecond: 0.29200624696510363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1866\nsuccessfulRxPacketsPerSecond: 0.8071183904878145\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:28:05][351672491096088][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:28:05][351672491096088][838 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.008/261.008/261.008/0.000 ms\n [2025-09-07 16:28:05][351672491096088][838 ms][DEBUG] check_internet: online [2025-09-07 16:28:05][351672491096088][838 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:28:05][351672491096088][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491096088\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5735\"}'\'' -e'"" [2025-09-07 16:28:05][351672491096088][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:28:05][351672491096088][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491096088\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5735\"}'\'' -e'"" [2025-09-07 16:28:10][351672491096088][5790 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e5d3210-4014-4d0c-bdf1-0b7a17eca6d8","id":"QR_4e5d3210-4014-4d0c-bdf1-0b7a17eca6d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:28:10][351672491096088][5946 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-07 16:28:10][351672491096088][5946 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-07 16:28:10][351672491096088][5946 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:28:14][351672491096088][1 ms][INFO] === Request start === [2025-09-07 16:28:14][351672491096088][1 ms][DEBUG] START check_scloud [2025-09-07 16:28:14][351672491096088][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:28:14][351672491096088][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 21609 5010 24117472 160476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:28:14][351672491096088][246 ms][DEBUG] targetPkg: running [2025-09-07 16:28:14][351672491096088][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-07 16:28:14][351672491096088][246 ms][DEBUG] START check_boot_completed [2025-09-07 16:28:14][351672491096088][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:28:14][351672491096088][292 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:28:14][351672491096088][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:28:14][351672491096088][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:28:14][351672491096088][339 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:28:14][351672491096088][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:28:15][351672491096088][433 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2058\nsuccessfulTxPacketsPerSecond: 0.9646049057049491\nretriedTxPackets: 417\nretriedTxPacketsPerSecond: 0.29200624696510363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1866\nsuccessfulRxPacketsPerSecond: 0.8071183904878145\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:28:15][351672491096088][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:28:15][351672491096088][839 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.695/303.695/303.695/0.000 ms\n [2025-09-07 16:28:15][351672491096088][839 ms][DEBUG] check_internet: online [2025-09-07 16:28:15][351672491096088][839 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:28:15][351672491096088][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491096088\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8358\"}'\'' -e'"" [2025-09-07 16:28:15][351672491096088][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:28:15][351672491096088][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672491096088\",\"model\":\"SM-S908W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8358\"}'\'' -e'"" [2025-09-07 16:28:20][351672491096088][5478 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b64839a-752b-4244-a9fa-9e36706fc2aa","id":"QR_4b64839a-752b-4244-a9fa-9e36706fc2aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:28:20][351672491096088][5635 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-07 16:28:20][351672491096088][5635 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-07 16:28:20][351672491096088][5635 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:30:05][358234210400167][0 ms][INFO] === Request start === [2025-09-07 16:30:05][358234210400167][1 ms][DEBUG] START check_scloud [2025-09-07 16:30:05][358234210400167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:30:05][358234210400167][277 ms][DEBUG] SU: done in 277 ms; outu0_a118 21609 5010 24235248 172800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:30:05][358234210400167][278 ms][DEBUG] targetPkg: running [2025-09-07 16:30:05][358234210400167][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-07 16:30:05][358234210400167][278 ms][DEBUG] START check_boot_completed [2025-09-07 16:30:05][358234210400167][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:30:05][358234210400167][324 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:30:05][358234210400167][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:30:05][358234210400167][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:30:05][358234210400167][371 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:30:05][358234210400167][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:30:05][358234210400167][480 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2111\nsuccessfulTxPacketsPerSecond: 0.46896844638717333\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.15042384129399897\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1913\nsuccessfulRxPacketsPerSecond: 0.4158776788716443\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:30:05][358234210400167][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:30:06][358234210400167][933 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.879/341.879/341.879/0.000 ms\n [2025-09-07 16:30:06][358234210400167][933 ms][DEBUG] check_internet: online [2025-09-07 16:30:06][358234210400167][933 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:30:06][358234210400167][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358234210400167\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3117\"}'\'' -e'"" [2025-09-07 16:30:06][358234210400167][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:30:06][358234210400167][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358234210400167\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3117\"}'\'' -e'"" [2025-09-07 16:30:12][358234210400167][7401 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f687bc8-43e4-44e8-a4b6-f96d4f7bdb75","id":"QR_2f687bc8-43e4-44e8-a4b6-f96d4f7bdb75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:30:12][358234210400167][7557 ms][DEBUG] proc_open done in 6623 ms; code=255; res.len=3343 [2025-09-07 16:30:12][358234210400167][7557 ms][DEBUG] END runCmdUntilRes#1 in 6623 ms [2025-09-07 16:30:12][358234210400167][7557 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:30:16][358234210400167][1 ms][INFO] === Request start === [2025-09-07 16:30:16][358234210400167][1 ms][DEBUG] START check_scloud [2025-09-07 16:30:16][358234210400167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:30:16][358234210400167][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 21609 5010 24390072 181272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:30:16][358234210400167][303 ms][DEBUG] targetPkg: running [2025-09-07 16:30:16][358234210400167][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 16:30:16][358234210400167][303 ms][DEBUG] START check_boot_completed [2025-09-07 16:30:16][358234210400167][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:30:16][358234210400167][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:30:16][358234210400167][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:30:16][358234210400167][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:30:16][358234210400167][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:30:16][358234210400167][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:30:16][358234210400167][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2111\nsuccessfulTxPacketsPerSecond: 0.46896844638717333\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.15042384129399897\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1913\nsuccessfulRxPacketsPerSecond: 0.4158776788716443\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:30:16][358234210400167][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:30:17][358234210400167][912 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.505/286.505/286.505/0.000 ms\n [2025-09-07 16:30:17][358234210400167][912 ms][DEBUG] check_internet: online [2025-09-07 16:30:17][358234210400167][912 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:30:17][358234210400167][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358234210400167\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8969\"}'\'' -e'"" [2025-09-07 16:30:17][358234210400167][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:30:17][358234210400167][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358234210400167\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8969\"}'\'' -e'"" [2025-09-07 16:30:21][358234210400167][5614 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54a11885-a9ca-4eea-836b-e76f930f90a8","id":"QR_54a11885-a9ca-4eea-836b-e76f930f90a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:30:22][358234210400167][5770 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-07 16:30:22][358234210400167][5770 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-07 16:30:22][358234210400167][5770 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:32:03][357576776375501][0 ms][INFO] === Request start === [2025-09-07 16:32:03][357576776375501][1 ms][DEBUG] START check_scloud [2025-09-07 16:32:03][357576776375501][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:32:03][357576776375501][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 21609 5010 24479224 182088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:32:03][357576776375501][274 ms][DEBUG] targetPkg: running [2025-09-07 16:32:03][357576776375501][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-07 16:32:03][357576776375501][274 ms][DEBUG] START check_boot_completed [2025-09-07 16:32:03][357576776375501][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:32:03][357576776375501][305 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:32:03][357576776375501][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:32:03][357576776375501][354 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 16:32:03][357576776375501][354 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 16:32:03][357576776375501][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:32:04][357576776375501][477 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2111\nsuccessfulTxPacketsPerSecond: 0.46896844638717333\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.15042384129399897\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1913\nsuccessfulRxPacketsPerSecond: 0.4158776788716443\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:32:04][357576776375501][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:32:05][357576776375501][1900 ms][DEBUG] SU: done in 1423 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.259/301.259/301.259/0.000 ms\n [2025-09-07 16:32:05][357576776375501][1900 ms][DEBUG] check_internet: online [2025-09-07 16:32:05][357576776375501][1900 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:32:05][357576776375501][1900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776375501\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4249\"}'\'' -e'"" [2025-09-07 16:32:05][357576776375501][1900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:32:05][357576776375501][1900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776375501\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4249\"}'\'' -e'"" [2025-09-07 16:32:10][357576776375501][6538 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3b2ea5e-70c5-4e6d-ab59-4ae9ddf3face","id":"QR_e3b2ea5e-70c5-4e6d-ab59-4ae9ddf3face","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:32:10][357576776375501][6694 ms][DEBUG] proc_open done in 4794 ms; code=255; res.len=3343 [2025-09-07 16:32:10][357576776375501][6694 ms][DEBUG] END runCmdUntilRes#1 in 4794 ms [2025-09-07 16:32:10][357576776375501][6694 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:32:12][357576776375501][0 ms][INFO] === Request start === [2025-09-07 16:32:12][357576776375501][1 ms][DEBUG] START check_scloud [2025-09-07 16:32:12][357576776375501][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:32:12][357576776375501][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21609 5010 24615552 193868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:32:12][357576776375501][308 ms][DEBUG] targetPkg: running [2025-09-07 16:32:12][357576776375501][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 16:32:12][357576776375501][308 ms][DEBUG] START check_boot_completed [2025-09-07 16:32:12][357576776375501][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:32:12][357576776375501][353 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 16:32:12][357576776375501][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:32:13][357576776375501][402 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 16:32:13][357576776375501][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:32:13][357576776375501][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:32:13][357576776375501][556 ms][DEBUG] SU: done in 154 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2111\nsuccessfulTxPacketsPerSecond: 0.46896844638717333\nretriedTxPackets: 434\nretriedTxPacketsPerSecond: 0.15042384129399897\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1913\nsuccessfulRxPacketsPerSecond: 0.4158776788716443\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:32:13][357576776375501][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:32:13][357576776375501][962 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.091/286.091/286.091/0.000 ms\n [2025-09-07 16:32:13][357576776375501][963 ms][DEBUG] check_internet: online [2025-09-07 16:32:13][357576776375501][963 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:32:13][357576776375501][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776375501\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3778\"}'\'' -e'"" [2025-09-07 16:32:13][357576776375501][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:32:13][357576776375501][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776375501\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3778\"}'\'' -e'"" [2025-09-07 16:32:19][357576776375501][6430 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9abf858-e48a-4a4e-925d-85d70c053eac","id":"QR_f9abf858-e48a-4a4e-925d-85d70c053eac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:32:19][357576776375501][6586 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-07 16:32:19][357576776375501][6586 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-07 16:32:19][357576776375501][6586 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:40:03][354464110976917][1 ms][INFO] === Request start === [2025-09-07 16:40:03][354464110976917][1 ms][DEBUG] START check_scloud [2025-09-07 16:40:03][354464110976917][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:40:03][354464110976917][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 21609 5010 24704748 183964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:40:03][354464110976917][259 ms][DEBUG] targetPkg: running [2025-09-07 16:40:03][354464110976917][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-07 16:40:03][354464110976917][259 ms][DEBUG] START check_boot_completed [2025-09-07 16:40:03][354464110976917][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:40:03][354464110976917][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:40:03][354464110976917][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:40:03][354464110976917][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:40:03][354464110976917][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:40:03][354464110976917][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:40:03][354464110976917][446 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2254\nsuccessfulTxPacketsPerSecond: 0.0531464350367873\nretriedTxPackets: 488\nretriedTxPacketsPerSecond: 0.04650313065718888\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2026\nsuccessfulRxPacketsPerSecond: 0.02657321751839365\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:40:03][354464110976917][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:40:05][354464110976917][1946 ms][DEBUG] SU: done in 1499 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.591/288.591/288.591/0.000 ms\n [2025-09-07 16:40:05][354464110976917][1946 ms][DEBUG] check_internet: online [2025-09-07 16:40:05][354464110976917][1946 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:40:05][354464110976917][1946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464110976917\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6768\"}'\'' -e'"" [2025-09-07 16:40:05][354464110976917][1946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:40:05][354464110976917][1946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464110976917\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6768\"}'\'' -e'"" [2025-09-07 16:40:09][354464110976917][5867 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b274342-0fb1-4237-b7f1-d06ca284670a","id":"QR_1b274342-0fb1-4237-b7f1-d06ca284670a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:40:09][354464110976917][6023 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-07 16:40:09][354464110976917][6023 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-07 16:40:09][354464110976917][6023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:40:11][354464110976917][0 ms][INFO] === Request start === [2025-09-07 16:40:11][354464110976917][1 ms][DEBUG] START check_scloud [2025-09-07 16:40:11][354464110976917][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:40:12][354464110976917][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21609 5010 24887360 196024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:40:12][354464110976917][304 ms][DEBUG] targetPkg: running [2025-09-07 16:40:12][354464110976917][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 16:40:12][354464110976917][304 ms][DEBUG] START check_boot_completed [2025-09-07 16:40:12][354464110976917][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:40:12][354464110976917][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:40:12][354464110976917][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:40:12][354464110976917][428 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 16:40:12][354464110976917][428 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-07 16:40:12][354464110976917][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:40:12][354464110976917][569 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2254\nsuccessfulTxPacketsPerSecond: 0.0531464350367873\nretriedTxPackets: 488\nretriedTxPacketsPerSecond: 0.04650313065718888\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2026\nsuccessfulRxPacketsPerSecond: 0.02657321751839365\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:40:12][354464110976917][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:40:12][354464110976917][1021 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.607/308.607/308.607/0.000 ms\n [2025-09-07 16:40:12][354464110976917][1021 ms][DEBUG] check_internet: online [2025-09-07 16:40:12][354464110976917][1021 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:40:12][354464110976917][1021 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464110976917\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6591\"}'\'' -e'"" [2025-09-07 16:40:12][354464110976917][1021 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:40:12][354464110976917][1021 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354464110976917\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6591\"}'\'' -e'"" [2025-09-07 16:40:18][354464110976917][6489 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04df0389-76d2-4d4c-8639-323ee017e4ef","id":"QR_04df0389-76d2-4d4c-8639-323ee017e4ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:40:18][354464110976917][6645 ms][DEBUG] proc_open done in 5624 ms; code=255; res.len=3343 [2025-09-07 16:40:18][354464110976917][6645 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-09-07 16:40:18][354464110976917][6645 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:43:04][357651717678618][1 ms][INFO] === Request start === [2025-09-07 16:43:04][357651717678618][1 ms][DEBUG] START check_scloud [2025-09-07 16:43:04][357651717678618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:43:05][357651717678618][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 21609 5010 24974596 190324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:43:05][357651717678618][250 ms][DEBUG] targetPkg: running [2025-09-07 16:43:05][357651717678618][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-07 16:43:05][357651717678618][251 ms][DEBUG] START check_boot_completed [2025-09-07 16:43:05][357651717678618][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:43:05][357651717678618][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:43:05][357651717678618][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:43:05][357651717678618][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:43:05][357651717678618][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:43:05][357651717678618][344 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:43:05][357651717678618][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651717678618\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9365\"}'\'' -e'"" [2025-09-07 16:43:05][357651717678618][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:43:05][357651717678618][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651717678618\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9365\"}'\'' -e'"" [2025-09-07 16:43:09][357651717678618][4124 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 16:43:09][357651717678618][4125 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-07 16:43:09][357651717678618][4125 ms][WARN] Detected error: Process with pid 21609 either refused to load frida-agent, or terminated during injectionProcess with pid 21609 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 16:43:09][357651717678618][4125 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 16:43:09][357651717678618][4421 ms][DEBUG] SU: done in 296 ms; outsystem 5432 5010 12892480 221720 ep_poll 0 S system_server\n [2025-09-07 16:43:09][357651717678618][4421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 16:43:09][357651717678618][4562 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 16:43:09][357651717678618][4562 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 16:43:09][357651717678618][4562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 16:43:09][357651717678618][4702 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 16:43:09][357651717678618][4702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 16:43:09][357651717678618][4860 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 16:43:11][357651717678618][6874 ms][DEBUG] START check_boot_completed [2025-09-07 16:43:11][357651717678618][6874 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:43:11][357651717678618][6921 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:43:11][357651717678618][6921 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:43:11][357651717678618][6967 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:43:11][357651717678618][6967 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:43:14][357651717678618][9982 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 16:43:14][357651717678618][9982 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651717678618\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9365\"}'\'' -e'"" [2025-09-07 16:43:20][357651717678618][15122 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a866f6c3-8743-40c8-9744-f6844e7d6650","id":"QR_a866f6c3-8743-40c8-9744-f6844e7d6650","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:43:20][357651717678618][15278 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 16:43:20][357651717678618][15278 ms][DEBUG] END runCmdUntilRes#2 in 5296 ms [2025-09-07 16:43:20][357651717678618][15278 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:43:23][357651717678618][0 ms][INFO] === Request start === [2025-09-07 16:43:23][357651717678618][1 ms][DEBUG] START check_scloud [2025-09-07 16:43:23][357651717678618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:43:23][357651717678618][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 24246 5010 23823968 124016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:43:23][357651717678618][249 ms][DEBUG] targetPkg: running [2025-09-07 16:43:23][357651717678618][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-07 16:43:23][357651717678618][249 ms][DEBUG] START check_boot_completed [2025-09-07 16:43:23][357651717678618][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:43:23][357651717678618][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:43:23][357651717678618][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:43:24][357651717678618][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:43:24][357651717678618][342 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:43:24][357651717678618][342 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:43:24][357651717678618][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651717678618\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4991\"}'\'' -e'"" [2025-09-07 16:43:24][357651717678618][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:43:24][357651717678618][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651717678618\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4991\"}'\'' -e'"" [2025-09-07 16:43:27][357651717678618][4013 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ef5512b-1058-4d58-b70a-73c7f868b6ff","id":"QR_6ef5512b-1058-4d58-b70a-73c7f868b6ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:43:27][357651717678618][4169 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-09-07 16:43:27][357651717678618][4169 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-07 16:43:27][357651717678618][4169 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:43:29][355001766847080][0 ms][INFO] === Request start === [2025-09-07 16:43:29][355001766847080][1 ms][DEBUG] START check_scloud [2025-09-07 16:43:29][355001766847080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:43:29][355001766847080][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 24246 5010 23992116 137456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:43:29][355001766847080][250 ms][DEBUG] targetPkg: running [2025-09-07 16:43:29][355001766847080][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-07 16:43:29][355001766847080][250 ms][DEBUG] START check_boot_completed [2025-09-07 16:43:29][355001766847080][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:43:29][355001766847080][297 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:43:29][355001766847080][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:43:30][355001766847080][359 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:43:30][355001766847080][359 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:43:30][355001766847080][359 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:43:30][355001766847080][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001766847080\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7338\"}'\'' -e'"" [2025-09-07 16:43:30][355001766847080][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:43:30][355001766847080][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001766847080\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7338\"}'\'' -e'"" [2025-09-07 16:43:33][355001766847080][3874 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a192c6ad-12e0-419a-bade-4624e82ee5b2","id":"QR_a192c6ad-12e0-419a-bade-4624e82ee5b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:43:33][355001766847080][4030 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-09-07 16:43:33][355001766847080][4030 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-07 16:43:33][355001766847080][4030 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:43:35][355001766847080][0 ms][INFO] === Request start === [2025-09-07 16:43:35][355001766847080][1 ms][DEBUG] START check_scloud [2025-09-07 16:43:35][355001766847080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:43:36][355001766847080][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 24246 5010 24105880 149192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:43:36][355001766847080][288 ms][DEBUG] targetPkg: running [2025-09-07 16:43:36][355001766847080][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 16:43:36][355001766847080][288 ms][DEBUG] START check_boot_completed [2025-09-07 16:43:36][355001766847080][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:43:36][355001766847080][334 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:43:36][355001766847080][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:43:36][355001766847080][397 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:43:36][355001766847080][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:43:36][355001766847080][397 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:43:36][355001766847080][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001766847080\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3794\"}'\'' -e'"" [2025-09-07 16:43:36][355001766847080][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:43:36][355001766847080][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001766847080\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3794\"}'\'' -e'"" [2025-09-07 16:43:41][355001766847080][5130 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b7a1089-2673-4b73-9076-c18b3066b64f","id":"QR_9b7a1089-2673-4b73-9076-c18b3066b64f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:43:41][355001766847080][5286 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-07 16:43:41][355001766847080][5286 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-07 16:43:41][355001766847080][5286 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:45:04][356150112865376][0 ms][INFO] === Request start === [2025-09-07 16:45:04][356150112865376][1 ms][DEBUG] START check_scloud [2025-09-07 16:45:04][356150112865376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:45:05][356150112865376][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 24246 5010 24135364 160400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:45:05][356150112865376][261 ms][DEBUG] targetPkg: running [2025-09-07 16:45:05][356150112865376][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-07 16:45:05][356150112865376][261 ms][DEBUG] START check_boot_completed [2025-09-07 16:45:05][356150112865376][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:45:05][356150112865376][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:45:05][356150112865376][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:45:05][356150112865376][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:45:05][356150112865376][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:45:05][356150112865376][340 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:45:05][356150112865376][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150112865376\",\"model\":\"SM-A315G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6189\"}'\'' -e'"" [2025-09-07 16:45:05][356150112865376][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:45:05][356150112865376][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150112865376\",\"model\":\"SM-A315G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6189\"}'\'' -e'"" [2025-09-07 16:45:10][356150112865376][6088 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23c37084-f6c8-464f-a492-1eee9a5dae02","id":"QR_23c37084-f6c8-464f-a492-1eee9a5dae02","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:45:11][356150112865376][6244 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=3343 [2025-09-07 16:45:11][356150112865376][6244 ms][DEBUG] END runCmdUntilRes#1 in 5905 ms [2025-09-07 16:45:11][356150112865376][6244 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:45:14][356150112865376][1 ms][INFO] === Request start === [2025-09-07 16:45:14][356150112865376][1 ms][DEBUG] START check_scloud [2025-09-07 16:45:14][356150112865376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:45:14][356150112865376][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 24246 5010 24244096 171688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:45:14][356150112865376][260 ms][DEBUG] targetPkg: running [2025-09-07 16:45:14][356150112865376][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-07 16:45:14][356150112865376][261 ms][DEBUG] START check_boot_completed [2025-09-07 16:45:14][356150112865376][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:45:14][356150112865376][307 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:45:14][356150112865376][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:45:14][356150112865376][369 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:45:14][356150112865376][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:45:14][356150112865376][370 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:45:14][356150112865376][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150112865376\",\"model\":\"SM-A315G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5273\"}'\'' -e'"" [2025-09-07 16:45:14][356150112865376][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:45:14][356150112865376][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150112865376\",\"model\":\"SM-A315G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5273\"}'\'' -e'"" [2025-09-07 16:45:18][356150112865376][4322 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65b3d02a-ff23-48b6-a96d-34b48ad131ff","id":"QR_65b3d02a-ff23-48b6-a96d-34b48ad131ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:45:19][356150112865376][4478 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-07 16:45:19][356150112865376][4478 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-07 16:45:19][356150112865376][4478 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:52:03][356663765508135][1 ms][INFO] === Request start === [2025-09-07 16:52:03][356663765508135][1 ms][DEBUG] START check_scloud [2025-09-07 16:52:03][356663765508135][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:52:04][356663765508135][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 24246 5010 24389768 184412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:52:04][356663765508135][288 ms][DEBUG] targetPkg: running [2025-09-07 16:52:04][356663765508135][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 16:52:04][356663765508135][288 ms][DEBUG] START check_boot_completed [2025-09-07 16:52:04][356663765508135][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:52:04][356663765508135][318 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 16:52:04][356663765508135][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:52:04][356663765508135][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:52:04][356663765508135][365 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 16:52:04][356663765508135][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:52:04][356663765508135][474 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2479\nsuccessfulTxPacketsPerSecond: 0.22574412567308266\nretriedTxPackets: 565\nretriedTxPacketsPerSecond: 0.08631393040441396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2219\nsuccessfulRxPacketsPerSecond: 0.17926739391685978\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:52:04][356663765508135][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:52:05][356663765508135][1943 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.890/301.890/301.890/0.000 ms\n [2025-09-07 16:52:05][356663765508135][1943 ms][DEBUG] check_internet: online [2025-09-07 16:52:05][356663765508135][1943 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:52:05][356663765508135][1943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765508135\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2407\"}'\'' -e'"" [2025-09-07 16:52:05][356663765508135][1943 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:52:05][356663765508135][1943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765508135\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2407\"}'\'' -e'"" [2025-09-07 16:52:09][356663765508135][5785 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_271bd965-fdaa-46cc-93bc-f9f7b6b9eab5","id":"QR_271bd965-fdaa-46cc-93bc-f9f7b6b9eab5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:52:09][356663765508135][5942 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-07 16:52:09][356663765508135][5942 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-07 16:52:09][356663765508135][5942 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:52:12][356663765508135][1 ms][INFO] === Request start === [2025-09-07 16:52:12][356663765508135][1 ms][DEBUG] START check_scloud [2025-09-07 16:52:12][356663765508135][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:52:12][356663765508135][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 24246 5010 24572380 195312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:52:12][356663765508135][313 ms][DEBUG] targetPkg: running [2025-09-07 16:52:12][356663765508135][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 16:52:12][356663765508135][313 ms][DEBUG] START check_boot_completed [2025-09-07 16:52:12][356663765508135][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:52:12][356663765508135][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:52:12][356663765508135][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:52:12][356663765508135][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:52:12][356663765508135][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:52:12][356663765508135][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:52:12][356663765508135][516 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2479\nsuccessfulTxPacketsPerSecond: 0.22574412567308266\nretriedTxPackets: 565\nretriedTxPacketsPerSecond: 0.08631393040441396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2219\nsuccessfulRxPacketsPerSecond: 0.17926739391685978\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:52:12][356663765508135][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:52:13][356663765508135][845 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.633/228.633/228.633/0.000 ms\n [2025-09-07 16:52:13][356663765508135][845 ms][DEBUG] check_internet: online [2025-09-07 16:52:13][356663765508135][845 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:52:13][356663765508135][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765508135\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5712\"}'\'' -e'"" [2025-09-07 16:52:13][356663765508135][846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:52:13][356663765508135][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663765508135\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5712\"}'\'' -e'"" [2025-09-07 16:52:18][356663765508135][6187 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37881b91-217b-4d85-8508-e3fe16e862e8","id":"QR_37881b91-217b-4d85-8508-e3fe16e862e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:52:18][356663765508135][6343 ms][DEBUG] proc_open done in 5497 ms; code=255; res.len=3343 [2025-09-07 16:52:18][356663765508135][6343 ms][DEBUG] END runCmdUntilRes#1 in 5497 ms [2025-09-07 16:52:18][356663765508135][6343 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:52:22][355728260688335][0 ms][INFO] === Request start === [2025-09-07 16:52:22][355728260688335][1 ms][DEBUG] START check_scloud [2025-09-07 16:52:22][355728260688335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:52:23][355728260688335][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 24246 5010 24735268 207064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:52:23][355728260688335][320 ms][DEBUG] targetPkg: running [2025-09-07 16:52:23][355728260688335][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-07 16:52:23][355728260688335][320 ms][DEBUG] START check_boot_completed [2025-09-07 16:52:23][355728260688335][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:52:23][355728260688335][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:52:23][355728260688335][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:52:23][355728260688335][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:52:23][355728260688335][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:52:23][355728260688335][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:52:23][355728260688335][523 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2479\nsuccessfulTxPacketsPerSecond: 0.22574412567308266\nretriedTxPackets: 565\nretriedTxPacketsPerSecond: 0.08631393040441396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2219\nsuccessfulRxPacketsPerSecond: 0.17926739391685978\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:52:23][355728260688335][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:52:23][355728260688335][930 ms][DEBUG] SU: done in 407 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.822/308.822/308.822/0.000 ms\n [2025-09-07 16:52:23][355728260688335][930 ms][DEBUG] check_internet: online [2025-09-07 16:52:23][355728260688335][930 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:52:23][355728260688335][930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355728260688335\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1534\"}'\'' -e'"" [2025-09-07 16:52:23][355728260688335][930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:52:23][355728260688335][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355728260688335\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1534\"}'\'' -e'"" [2025-09-07 16:52:27][355728260688335][4443 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a9dc537-4e1f-4f72-8882-d9a0b64e20b2","id":"QR_3a9dc537-4e1f-4f72-8882-d9a0b64e20b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:52:27][355728260688335][4600 ms][DEBUG] proc_open done in 3669 ms; code=255; res.len=3343 [2025-09-07 16:52:27][355728260688335][4600 ms][DEBUG] END runCmdUntilRes#1 in 3669 ms [2025-09-07 16:52:27][355728260688335][4600 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:52:29][355728260688335][0 ms][INFO] === Request start === [2025-09-07 16:52:29][355728260688335][1 ms][DEBUG] START check_scloud [2025-09-07 16:52:29][355728260688335][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:52:29][355728260688335][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 24246 5010 24854400 217972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:52:29][355728260688335][313 ms][DEBUG] targetPkg: running [2025-09-07 16:52:29][355728260688335][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 16:52:29][355728260688335][313 ms][DEBUG] START check_boot_completed [2025-09-07 16:52:29][355728260688335][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:52:29][355728260688335][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:52:29][355728260688335][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:52:30][355728260688335][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:52:30][355728260688335][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:52:30][355728260688335][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 16:52:30][355728260688335][547 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2479\nsuccessfulTxPacketsPerSecond: 0.22574412567308266\nretriedTxPackets: 565\nretriedTxPacketsPerSecond: 0.08631393040441396\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2219\nsuccessfulRxPacketsPerSecond: 0.17926739391685978\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 16:52:30][355728260688335][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 16:52:30][355728260688335][1000 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.407/340.407/340.407/0.000 ms\n [2025-09-07 16:52:30][355728260688335][1000 ms][DEBUG] check_internet: online [2025-09-07 16:52:30][355728260688335][1000 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:52:30][355728260688335][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355728260688335\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9957\"}'\'' -e'"" [2025-09-07 16:52:30][355728260688335][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:52:30][355728260688335][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355728260688335\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9957\"}'\'' -e'"" [2025-09-07 16:52:35][355728260688335][5842 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd817f5e-16fc-442d-9bb3-38d692efe4cd","id":"QR_dd817f5e-16fc-442d-9bb3-38d692efe4cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:52:35][355728260688335][5998 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-07 16:52:35][355728260688335][5998 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-07 16:52:35][355728260688335][5998 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:53:04][352353114580308][1 ms][INFO] === Request start === [2025-09-07 16:53:04][352353114580308][1 ms][DEBUG] START check_scloud [2025-09-07 16:53:04][352353114580308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:53:04][352353114580308][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 24246 5010 24935264 230076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:53:04][352353114580308][308 ms][DEBUG] targetPkg: running [2025-09-07 16:53:04][352353114580308][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 16:53:04][352353114580308][308 ms][DEBUG] START check_boot_completed [2025-09-07 16:53:04][352353114580308][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:53:04][352353114580308][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:53:04][352353114580308][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:53:04][352353114580308][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:53:04][352353114580308][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:53:04][352353114580308][386 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:53:04][352353114580308][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353114580308\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7134\"}'\'' -e'"" [2025-09-07 16:53:04][352353114580308][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:53:04][352353114580308][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353114580308\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7134\"}'\'' -e'"" [2025-09-07 16:53:07][352353114580308][3776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0935b65-6328-4a0c-a45f-20a9c2be9a61","id":"QR_c0935b65-6328-4a0c-a45f-20a9c2be9a61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:53:07][352353114580308][3932 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-09-07 16:53:07][352353114580308][3932 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-07 16:53:07][352353114580308][3932 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:53:10][352353114580308][0 ms][INFO] === Request start === [2025-09-07 16:53:10][352353114580308][1 ms][DEBUG] START check_scloud [2025-09-07 16:53:10][352353114580308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:53:10][352353114580308][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 24246 5010 25116776 240980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:53:10][352353114580308][257 ms][DEBUG] targetPkg: running [2025-09-07 16:53:10][352353114580308][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-07 16:53:10][352353114580308][257 ms][DEBUG] START check_boot_completed [2025-09-07 16:53:10][352353114580308][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:53:10][352353114580308][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:53:10][352353114580308][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:53:10][352353114580308][366 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:53:10][352353114580308][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:53:10][352353114580308][366 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:53:10][352353114580308][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353114580308\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4161\"}'\'' -e'"" [2025-09-07 16:53:10][352353114580308][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:53:10][352353114580308][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353114580308\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4161\"}'\'' -e'"" [2025-09-07 16:53:14][352353114580308][4271 ms][DEBUG] proc_open done in 3905 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 16:53:14][352353114580308][4271 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-07 16:53:14][352353114580308][4271 ms][WARN] Detected error: Process with pid 24246 either refused to load frida-agent, or terminated during injectionProcess with pid 24246 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 16:53:14][352353114580308][4271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 16:53:14][352353114580308][4570 ms][DEBUG] SU: done in 299 ms; outsystem 5432 5010 12899916 189888 ep_poll 0 S system_server\n [2025-09-07 16:53:14][352353114580308][4570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 16:53:14][352353114580308][4709 ms][DEBUG] SU: done in 138 ms; out [2025-09-07 16:53:14][352353114580308][4709 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 16:53:14][352353114580308][4709 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 16:53:15][352353114580308][4834 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 16:53:15][352353114580308][4834 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 16:53:15][352353114580308][5006 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 16:53:17][352353114580308][7021 ms][DEBUG] START check_boot_completed [2025-09-07 16:53:17][352353114580308][7021 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:53:17][352353114580308][7067 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:53:17][352353114580308][7068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:53:17][352353114580308][7114 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:53:17][352353114580308][7114 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:53:20][352353114580308][10129 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 16:53:20][352353114580308][10129 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352353114580308\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4161\"}'\'' -e'"" [2025-09-07 16:53:26][352353114580308][16159 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8cf2b89-847c-4c2b-a252-8004735a1317","id":"QR_d8cf2b89-847c-4c2b-a252-8004735a1317","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:53:26][352353114580308][16315 ms][DEBUG] proc_open done in 6186 ms; code=255; res.len=3343 [2025-09-07 16:53:26][352353114580308][16315 ms][DEBUG] END runCmdUntilRes#2 in 6186 ms [2025-09-07 16:53:26][352353114580308][16315 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:55:05][358779104633802][1 ms][INFO] === Request start === [2025-09-07 16:55:05][358779104633802][1 ms][DEBUG] START check_scloud [2025-09-07 16:55:05][358779104633802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:55:05][358779104633802][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 25559 5010 23692468 127152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:55:05][358779104633802][300 ms][DEBUG] targetPkg: running [2025-09-07 16:55:05][358779104633802][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 16:55:05][358779104633802][300 ms][DEBUG] START check_boot_completed [2025-09-07 16:55:05][358779104633802][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:55:05][358779104633802][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 16:55:05][358779104633802][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:55:05][358779104633802][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:55:05][358779104633802][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 16:55:05][358779104633802][378 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:55:05][358779104633802][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358779104633802\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7499\"}'\'' -e'"" [2025-09-07 16:55:05][358779104633802][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:55:05][358779104633802][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358779104633802\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7499\"}'\'' -e'"" [2025-09-07 16:55:11][358779104633802][6439 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f4e14c4-0ea4-4e97-b85f-6a7b59201fae","id":"QR_5f4e14c4-0ea4-4e97-b85f-6a7b59201fae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:55:11][358779104633802][6595 ms][DEBUG] proc_open done in 6217 ms; code=255; res.len=3343 [2025-09-07 16:55:11][358779104633802][6595 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-09-07 16:55:11][358779104633802][6596 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:55:15][358779104633802][0 ms][INFO] === Request start === [2025-09-07 16:55:15][358779104633802][1 ms][DEBUG] START check_scloud [2025-09-07 16:55:15][358779104633802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:55:15][358779104633802][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 25559 5010 23799152 138092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:55:15][358779104633802][296 ms][DEBUG] targetPkg: running [2025-09-07 16:55:15][358779104633802][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-07 16:55:15][358779104633802][296 ms][DEBUG] START check_boot_completed [2025-09-07 16:55:15][358779104633802][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:55:15][358779104633802][343 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:55:15][358779104633802][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:55:15][358779104633802][437 ms][DEBUG] SU: done in 93 ms; out [2025-09-07 16:55:15][358779104633802][437 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 16:55:15][358779104633802][437 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:55:15][358779104633802][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358779104633802\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3356\"}'\'' -e'"" [2025-09-07 16:55:15][358779104633802][437 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:55:15][358779104633802][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358779104633802\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3356\"}'\'' -e'"" [2025-09-07 16:55:19][358779104633802][4342 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ff307a5-16b2-4e32-8499-585d76e233e2","id":"QR_4ff307a5-16b2-4e32-8499-585d76e233e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:55:19][358779104633802][4498 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-07 16:55:19][358779104633802][4498 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-09-07 16:55:19][358779104633802][4498 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:57:03][356414815307197][1 ms][INFO] === Request start === [2025-09-07 16:57:03][356414815307197][1 ms][DEBUG] START check_scloud [2025-09-07 16:57:03][356414815307197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:57:03][356414815307197][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 25559 5010 23896496 150240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:57:03][356414815307197][317 ms][DEBUG] targetPkg: running [2025-09-07 16:57:03][356414815307197][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 16:57:03][356414815307197][317 ms][DEBUG] START check_boot_completed [2025-09-07 16:57:03][356414815307197][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:57:03][356414815307197][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:57:03][356414815307197][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:57:03][356414815307197][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:57:03][356414815307197][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 16:57:03][356414815307197][411 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:57:03][356414815307197][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815307197\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1860\"}'\'' -e'"" [2025-09-07 16:57:03][356414815307197][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:57:03][356414815307197][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815307197\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1860\"}'\'' -e'"" [2025-09-07 16:57:08][356414815307197][5066 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1682438f-71b1-46d8-98de-7605afa25f30","id":"QR_1682438f-71b1-46d8-98de-7605afa25f30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:57:08][356414815307197][5222 ms][DEBUG] proc_open done in 4810 ms; code=255; res.len=3343 [2025-09-07 16:57:08][356414815307197][5222 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 16:57:08][356414815307197][5222 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:57:10][356414815307197][0 ms][INFO] === Request start === [2025-09-07 16:57:10][356414815307197][1 ms][DEBUG] START check_scloud [2025-09-07 16:57:10][356414815307197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:57:11][356414815307197][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 25559 5010 24020664 161292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:57:11][356414815307197][307 ms][DEBUG] targetPkg: running [2025-09-07 16:57:11][356414815307197][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 16:57:11][356414815307197][307 ms][DEBUG] START check_boot_completed [2025-09-07 16:57:11][356414815307197][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:57:11][356414815307197][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:57:11][356414815307197][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:57:11][356414815307197][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:57:11][356414815307197][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:57:11][356414815307197][400 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:57:11][356414815307197][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815307197\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6989\"}'\'' -e'"" [2025-09-07 16:57:11][356414815307197][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:57:11][356414815307197][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815307197\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6989\"}'\'' -e'"" [2025-09-07 16:57:15][356414815307197][5040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_632ab1d8-3c17-4b38-bb44-3a1776af76fd","id":"QR_632ab1d8-3c17-4b38-bb44-3a1776af76fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:57:16][356414815307197][5196 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-07 16:57:16][356414815307197][5196 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-07 16:57:16][356414815307197][5196 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:59:03][352600226965862][0 ms][INFO] === Request start === [2025-09-07 16:59:03][352600226965862][1 ms][DEBUG] START check_scloud [2025-09-07 16:59:03][352600226965862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:59:04][352600226965862][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25559 5010 24134456 172420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:59:04][352600226965862][308 ms][DEBUG] targetPkg: running [2025-09-07 16:59:04][352600226965862][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 16:59:04][352600226965862][308 ms][DEBUG] START check_boot_completed [2025-09-07 16:59:04][352600226965862][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:59:04][352600226965862][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:59:04][352600226965862][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:59:04][352600226965862][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:59:04][352600226965862][401 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 16:59:04][352600226965862][401 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:59:04][352600226965862][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226965862\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6125\"}'\'' -e'"" [2025-09-07 16:59:04][352600226965862][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:59:04][352600226965862][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226965862\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6125\"}'\'' -e'"" [2025-09-07 16:59:09][352600226965862][5243 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed284d4d-073d-4c6b-ab6f-90d2a1726d4a","id":"QR_ed284d4d-073d-4c6b-ab6f-90d2a1726d4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:59:09][352600226965862][5399 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-07 16:59:09][352600226965862][5399 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-07 16:59:09][352600226965862][5400 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:59:11][352600226965862][1 ms][INFO] === Request start === [2025-09-07 16:59:11][352600226965862][1 ms][DEBUG] START check_scloud [2025-09-07 16:59:11][352600226965862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:59:11][352600226965862][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 25559 5010 24275008 184284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:59:11][352600226965862][317 ms][DEBUG] targetPkg: running [2025-09-07 16:59:11][352600226965862][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 16:59:11][352600226965862][317 ms][DEBUG] START check_boot_completed [2025-09-07 16:59:11][352600226965862][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:59:11][352600226965862][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:59:11][352600226965862][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:59:11][352600226965862][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:59:11][352600226965862][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:59:11][352600226965862][411 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:59:11][352600226965862][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226965862\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6190\"}'\'' -e'"" [2025-09-07 16:59:11][352600226965862][411 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:59:11][352600226965862][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226965862\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6190\"}'\'' -e'"" [2025-09-07 16:59:17][352600226965862][5581 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbfb673c-a882-4447-8562-7f3ebcc9c7f9","id":"QR_cbfb673c-a882-4447-8562-7f3ebcc9c7f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:59:17][352600226965862][5738 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-07 16:59:17][352600226965862][5738 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-07 16:59:17][352600226965862][5738 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:59:22][357576777772458][0 ms][INFO] === Request start === [2025-09-07 16:59:22][357576777772458][1 ms][DEBUG] START check_scloud [2025-09-07 16:59:22][357576777772458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:59:22][357576777772458][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 25559 5010 24433864 195148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:59:22][357576777772458][312 ms][DEBUG] targetPkg: running [2025-09-07 16:59:22][357576777772458][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 16:59:22][357576777772458][312 ms][DEBUG] START check_boot_completed [2025-09-07 16:59:22][357576777772458][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:59:22][357576777772458][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 16:59:22][357576777772458][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:59:22][357576777772458][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 16:59:22][357576777772458][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 16:59:22][357576777772458][405 ms][DEBUG] rawBody.length=1160 [2025-09-07 16:59:22][357576777772458][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777772458\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6946\"}'\'' -e'"" [2025-09-07 16:59:22][357576777772458][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:59:22][357576777772458][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777772458\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6946\"}'\'' -e'"" [2025-09-07 16:59:27][357576777772458][5029 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7b410fc-6291-4f3d-b5bd-7cbf0c5f62e8","id":"QR_a7b410fc-6291-4f3d-b5bd-7cbf0c5f62e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:59:27][357576777772458][5185 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-09-07 16:59:27][357576777772458][5185 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-07 16:59:27][357576777772458][5185 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 16:59:31][357576777772458][0 ms][INFO] === Request start === [2025-09-07 16:59:31][357576777772458][1 ms][DEBUG] START check_scloud [2025-09-07 16:59:31][357576777772458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 16:59:31][357576777772458][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 25559 5010 24554980 207048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 16:59:31][357576777772458][314 ms][DEBUG] targetPkg: running [2025-09-07 16:59:31][357576777772458][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 16:59:31][357576777772458][314 ms][DEBUG] START check_boot_completed [2025-09-07 16:59:31][357576777772458][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 16:59:31][357576777772458][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 16:59:31][357576777772458][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 16:59:31][357576777772458][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 16:59:31][357576777772458][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 16:59:31][357576777772458][423 ms][DEBUG] rawBody.length=1150 [2025-09-07 16:59:31][357576777772458][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777772458\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6892\"}'\'' -e'"" [2025-09-07 16:59:31][357576777772458][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 16:59:31][357576777772458][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777772458\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6892\"}'\'' -e'"" [2025-09-07 16:59:35][357576777772458][3844 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dda94158-9435-4610-932a-78c75217a208","id":"QR_dda94158-9435-4610-932a-78c75217a208","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 16:59:35][357576777772458][4000 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-09-07 16:59:35][357576777772458][4000 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-07 16:59:35][357576777772458][4000 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:02:04][352600228277985][1 ms][INFO] === Request start === [2025-09-07 17:02:04][352600228277985][1 ms][DEBUG] START check_scloud [2025-09-07 17:02:04][352600228277985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:02:04][352600228277985][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 25559 5010 24633856 218328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:02:04][352600228277985][299 ms][DEBUG] targetPkg: running [2025-09-07 17:02:04][352600228277985][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-07 17:02:04][352600228277985][299 ms][DEBUG] START check_boot_completed [2025-09-07 17:02:04][352600228277985][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:02:04][352600228277985][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:02:04][352600228277985][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:02:04][352600228277985][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:02:04][352600228277985][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 17:02:04][352600228277985][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:02:04][352600228277985][487 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2742\nsuccessfulTxPacketsPerSecond: 0.5577818873612601\nretriedTxPackets: 647\nretriedTxPacketsPerSecond: 0.1759669049413499\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2444\nsuccessfulRxPacketsPerSecond: 0.47809876059536577\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:02:04][352600228277985][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:02:05][352600228277985][1861 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.573/300.573/300.573/0.000 ms\n [2025-09-07 17:02:05][352600228277985][1862 ms][DEBUG] check_internet: online [2025-09-07 17:02:05][352600228277985][1862 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:02:05][352600228277985][1862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228277985\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9005\"}'\'' -e'"" [2025-09-07 17:02:05][352600228277985][1862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:02:05][352600228277985][1862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228277985\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9005\"}'\'' -e'"" [2025-09-07 17:02:09][352600228277985][5798 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0daad8b-f720-4568-9008-e0ed703985a7","id":"QR_e0daad8b-f720-4568-9008-e0ed703985a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:02:09][352600228277985][5954 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-07 17:02:09][352600228277985][5954 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-07 17:02:09][352600228277985][5954 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:02:12][352600228277985][0 ms][INFO] === Request start === [2025-09-07 17:02:12][352600228277985][1 ms][DEBUG] START check_scloud [2025-09-07 17:02:12][352600228277985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:02:12][352600228277985][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 25559 5010 24796808 230360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:02:12][352600228277985][262 ms][DEBUG] targetPkg: running [2025-09-07 17:02:12][352600228277985][262 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 17:02:12][352600228277985][262 ms][DEBUG] START check_boot_completed [2025-09-07 17:02:12][352600228277985][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:02:12][352600228277985][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:02:12][352600228277985][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:02:12][352600228277985][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:02:12][352600228277985][356 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 17:02:12][352600228277985][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:02:12][352600228277985][512 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2742\nsuccessfulTxPacketsPerSecond: 0.5577818873612601\nretriedTxPackets: 647\nretriedTxPacketsPerSecond: 0.1759669049413499\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2444\nsuccessfulRxPacketsPerSecond: 0.47809876059536577\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:02:12][352600228277985][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:02:13][352600228277985][918 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.452/297.452/297.452/0.000 ms\n [2025-09-07 17:02:13][352600228277985][919 ms][DEBUG] check_internet: online [2025-09-07 17:02:13][352600228277985][919 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:02:13][352600228277985][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228277985\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2204\"}'\'' -e'"" [2025-09-07 17:02:13][352600228277985][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:02:13][352600228277985][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228277985\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2204\"}'\'' -e'"" [2025-09-07 17:02:18][352600228277985][6182 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b22da367-2928-4305-854c-984cc43916c7","id":"QR_b22da367-2928-4305-854c-984cc43916c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:02:18][352600228277985][6338 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-07 17:02:18][352600228277985][6339 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-07 17:02:18][352600228277985][6339 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:06:04][352497331815979][1 ms][INFO] === Request start === [2025-09-07 17:06:04][352497331815979][1 ms][DEBUG] START check_scloud [2025-09-07 17:06:04][352497331815979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:06:04][352497331815979][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 25559 5010 24926056 222996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:06:04][352497331815979][331 ms][DEBUG] targetPkg: running [2025-09-07 17:06:04][352497331815979][331 ms][DEBUG] END check_scloud in 330 ms [2025-09-07 17:06:04][352497331815979][331 ms][DEBUG] START check_boot_completed [2025-09-07 17:06:04][352497331815979][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:06:05][352497331815979][377 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:06:05][352497331815979][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:06:05][352497331815979][440 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 17:06:05][352497331815979][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 17:06:05][352497331815979][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:06:05][352497331815979][596 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30868 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2907\nsuccessfulTxPacketsPerSecond: 0.02658796629309682\nretriedTxPackets: 693\nretriedTxPacketsPerSecond: 1.9700927012513903E-12\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2581\nsuccessfulRxPacketsPerSecond: 0.01329398314888254\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:06:05][352497331815979][597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:06:06][352497331815979][2096 ms][DEBUG] SU: done in 1499 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.934/300.934/300.934/0.000 ms\n [2025-09-07 17:06:06][352497331815979][2096 ms][DEBUG] check_internet: online [2025-09-07 17:06:06][352497331815979][2096 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:06:06][352497331815979][2096 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497331815979\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-07 17:06:06][352497331815979][2096 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:06:06][352497331815979][2096 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497331815979\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-07 17:06:14][352497331815979][10219 ms][DEBUG] proc_open done in 8123 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 17:06:14][352497331815979][10219 ms][DEBUG] END runCmdUntilRes#1 in 8123 ms [2025-09-07 17:06:14][352497331815979][10219 ms][WARN] Detected error: Process with pid 25559 either refused to load frida-agent, or terminated during injectionProcess with pid 25559 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 17:06:14][352497331815979][10219 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 17:06:15][352497331815979][10562 ms][DEBUG] SU: done in 344 ms; out [2025-09-07 17:06:15][352497331815979][10563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 17:06:15][352497331815979][10798 ms][DEBUG] SU: done in 236 ms; out [2025-09-07 17:06:15][352497331815979][10798 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 17:06:15][352497331815979][10798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 17:06:15][352497331815979][11156 ms][DEBUG] SU: done in 358 ms; out [2025-09-07 17:06:15][352497331815979][11156 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 17:06:16][352497331815979][11359 ms][DEBUG] SU: done in 203 ms; out [2025-09-07 17:06:18][352497331815979][13374 ms][DEBUG] START check_boot_completed [2025-09-07 17:06:18][352497331815979][13374 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:06:18][352497331815979][13421 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:06:18][352497331815979][13421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:06:18][352497331815979][13484 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 17:06:18][352497331815979][13484 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 17:06:21][352497331815979][16498 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 17:06:21][352497331815979][16498 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497331815979\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-07 17:06:22][352497331815979][17905 ms][DEBUG] proc_open done in 1406 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 17:06:22][352497331815979][17905 ms][DEBUG] END runCmdUntilRes#2 in 1407 ms [2025-09-07 17:06:22][352497331815979][17905 ms][WARN] Detected error 2; Reboot the device [2025-09-07 17:06:22][352497331815979][17905 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 17:06:22][352497331815979][18154 ms][DEBUG] SU: done in 249 ms; outsystem 28195 27858 7398532 123204 binder_ioctl 0 R system_server\n [2025-09-07 17:06:22][352497331815979][18155 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 17:06:23][352497331815979][18795 ms][DEBUG] SU: done in 640 ms; out [2025-09-07 17:07:04][352497331815979][0 ms][INFO] === Request start === [2025-09-07 17:07:04][352497331815979][1 ms][DEBUG] START check_scloud [2025-09-07 17:07:04][352497331815979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:07:04][352497331815979][42 ms][DEBUG] SU: done in 42 ms; out [2025-09-07 17:07:04][352497331815979][42 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 17:07:04][352497331815979][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-07 17:07:04][352497331815979][74 ms][WARN] check_devices: no device [2025-09-07 17:07:04][352497331815979][74 ms][WARN] check_devices: no device [2025-09-07 17:07:04][352497331815979][74 ms][DEBUG] END check_scloud in 73 ms [2025-09-07 17:08:04][352497331815979][1 ms][INFO] === Request start === [2025-09-07 17:08:04][352497331815979][1 ms][DEBUG] START check_scloud [2025-09-07 17:08:04][352497331815979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:08:04][352497331815979][409 ms][DEBUG] SU: done in 409 ms; out [2025-09-07 17:08:04][352497331815979][410 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 17:08:04][352497331815979][456 ms][DEBUG] ADB: done in 46 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 17:08:04][352497331815979][456 ms][DEBUG] check_devices: device found [2025-09-07 17:08:04][352497331815979][456 ms][WARN] targetPkg: not running, restarting [2025-09-07 17:08:04][352497331815979][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 17:08:04][352497331815979][581 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 17:08:04][352497331815979][581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 17:08:05][352497331815979][864 ms][DEBUG] SU: done in 282 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 17:08:07][352497331815979][2877 ms][DEBUG] END check_scloud in 2877 ms [2025-09-07 17:08:07][352497331815979][2877 ms][DEBUG] START check_boot_completed [2025-09-07 17:08:07][352497331815979][2878 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:08:07][352497331815979][2924 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:08:07][352497331815979][2924 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:08:07][352497331815979][3002 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 17:08:07][352497331815979][3002 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 17:08:07][352497331815979][3002 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:08:07][352497331815979][3159 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 132\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 10\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 124\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:08:07][352497331815979][3159 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:08:08][352497331815979][4051 ms][DEBUG] SU: done in 892 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.352/220.352/220.352/0.000 ms\n [2025-09-07 17:08:08][352497331815979][4051 ms][DEBUG] check_internet: online [2025-09-07 17:08:08][352497331815979][4051 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:08:08][352497331815979][4051 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497331815979\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7425\"}'\'' -e'"" [2025-09-07 17:08:08][352497331815979][4052 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:08:08][352497331815979][4052 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497331815979\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7425\"}'\'' -e'"" [2025-09-07 17:08:16][352497331815979][12547 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf65e54f-f304-4ff0-8a03-28f8b1b974a0","id":"QR_cf65e54f-f304-4ff0-8a03-28f8b1b974a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:08:17][352497331815979][12703 ms][DEBUG] proc_open done in 8651 ms; code=255; res.len=3343 [2025-09-07 17:08:17][352497331815979][12703 ms][DEBUG] END runCmdUntilRes#1 in 8651 ms [2025-09-07 17:08:17][352497331815979][12703 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:08:20][352497331815979][1 ms][INFO] === Request start === [2025-09-07 17:08:20][352497331815979][1 ms][DEBUG] START check_scloud [2025-09-07 17:08:20][352497331815979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:08:20][352497331815979][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 11367 5015 23611684 104984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:08:20][352497331815979][293 ms][DEBUG] targetPkg: running [2025-09-07 17:08:20][352497331815979][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-07 17:08:20][352497331815979][293 ms][DEBUG] START check_boot_completed [2025-09-07 17:08:20][352497331815979][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:08:20][352497331815979][323 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 17:08:20][352497331815979][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:08:20][352497331815979][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:08:20][352497331815979][370 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-07 17:08:20][352497331815979][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:08:21][352497331815979][511 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 684\nsuccessfulTxPacketsPerSecond: 23.216983252959487\nretriedTxPackets: 71\nretriedTxPacketsPerSecond: 2.3208073179449533\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 747\nsuccessfulRxPacketsPerSecond: 30.94714316084393\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:08:21][352497331815979][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:08:21][352497331815979][855 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.410/226.410/226.410/0.000 ms\n [2025-09-07 17:08:21][352497331815979][855 ms][DEBUG] check_internet: online [2025-09-07 17:08:21][352497331815979][855 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:08:21][352497331815979][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497331815979\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5166\"}'\'' -e'"" [2025-09-07 17:08:21][352497331815979][855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:08:21][352497331815979][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497331815979\",\"model\":\"SM-S901E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5166\"}'\'' -e'"" [2025-09-07 17:08:26][352497331815979][5744 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c24aba12-f4fb-460f-b3e1-917855dbebba","id":"QR_c24aba12-f4fb-460f-b3e1-917855dbebba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:08:26][352497331815979][5900 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-07 17:08:26][352497331815979][5900 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-07 17:08:26][352497331815979][5900 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:08:29][358850130550961][0 ms][INFO] === Request start === [2025-09-07 17:08:29][358850130550961][1 ms][DEBUG] START check_scloud [2025-09-07 17:08:29][358850130550961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:08:30][358850130550961][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11367 5015 23760496 109968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:08:30][358850130550961][313 ms][DEBUG] targetPkg: running [2025-09-07 17:08:30][358850130550961][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 17:08:30][358850130550961][313 ms][DEBUG] START check_boot_completed [2025-09-07 17:08:30][358850130550961][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:08:30][358850130550961][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:08:30][358850130550961][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:08:30][358850130550961][422 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 17:08:30][358850130550961][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 17:08:30][358850130550961][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:08:30][358850130550961][641 ms][DEBUG] SU: done in 218 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 748\nsuccessfulTxPacketsPerSecond: 7.156695398360016\nretriedTxPackets: 83\nretriedTxPacketsPerSecond: 1.2646884757888834\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 802\nsuccessfulRxPacketsPerSecond: 6.567889109235406\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:08:30][358850130550961][641 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:08:30][358850130550961][1000 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.320/220.320/220.320/0.000 ms\n [2025-09-07 17:08:30][358850130550961][1000 ms][DEBUG] check_internet: online [2025-09-07 17:08:30][358850130550961][1000 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:08:30][358850130550961][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358850130550961\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3824\"}'\'' -e'"" [2025-09-07 17:08:30][358850130550961][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:08:30][358850130550961][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358850130550961\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3824\"}'\'' -e'"" [2025-09-07 17:08:36][358850130550961][6436 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e7b314d-5b48-48b6-bb8a-a70efcd1998d","id":"QR_0e7b314d-5b48-48b6-bb8a-a70efcd1998d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:08:36][358850130550961][6592 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-09-07 17:08:36][358850130550961][6592 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-09-07 17:08:36][358850130550961][6592 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:08:39][358850130550961][0 ms][INFO] === Request start === [2025-09-07 17:08:39][358850130550961][1 ms][DEBUG] START check_scloud [2025-09-07 17:08:39][358850130550961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:08:40][358850130550961][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 11367 5015 23855588 102884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:08:40][358850130550961][318 ms][DEBUG] targetPkg: running [2025-09-07 17:08:40][358850130550961][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 17:08:40][358850130550961][318 ms][DEBUG] START check_boot_completed [2025-09-07 17:08:40][358850130550961][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:08:40][358850130550961][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:08:40][358850130550961][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:08:40][358850130550961][412 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 17:08:40][358850130550961][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 17:08:40][358850130550961][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:08:40][358850130550961][521 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 748\nsuccessfulTxPacketsPerSecond: 7.156695398360016\nretriedTxPackets: 83\nretriedTxPacketsPerSecond: 1.2646884757888834\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 802\nsuccessfulRxPacketsPerSecond: 6.567889109235406\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:08:40][358850130550961][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:08:40][358850130550961][1099 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=446 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 446.399/446.399/446.399/0.000 ms\n [2025-09-07 17:08:40][358850130550961][1099 ms][DEBUG] check_internet: online [2025-09-07 17:08:40][358850130550961][1099 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:08:40][358850130550961][1099 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358850130550961\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9044\"}'\'' -e'"" [2025-09-07 17:08:40][358850130550961][1099 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:08:40][358850130550961][1099 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358850130550961\",\"model\":\"SM-A546U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9044\"}'\'' -e'"" [2025-09-07 17:08:44][358850130550961][4848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4974852-54ed-41f7-b163-4bb8ef07491e","id":"QR_a4974852-54ed-41f7-b163-4bb8ef07491e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:08:44][358850130550961][5004 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-07 17:08:44][358850130550961][5005 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-07 17:08:44][358850130550961][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:13:05][351223621336240][1 ms][INFO] === Request start === [2025-09-07 17:13:05][351223621336240][1 ms][DEBUG] START check_scloud [2025-09-07 17:13:05][351223621336240][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:13:05][351223621336240][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 11367 5015 23980680 90376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:13:05][351223621336240][335 ms][DEBUG] targetPkg: running [2025-09-07 17:13:05][351223621336240][335 ms][DEBUG] END check_scloud in 334 ms [2025-09-07 17:13:05][351223621336240][335 ms][DEBUG] START check_boot_completed [2025-09-07 17:13:05][351223621336240][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:13:05][351223621336240][366 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:13:05][351223621336240][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:13:05][351223621336240][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:13:05][351223621336240][413 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 17:13:05][351223621336240][413 ms][DEBUG] rawBody.length=1161 [2025-09-07 17:13:05][351223621336240][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351223621336240\",\"model\":\"SM-S236DL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3359\"}'\'' -e'"" [2025-09-07 17:13:05][351223621336240][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:13:05][351223621336240][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351223621336240\",\"model\":\"SM-S236DL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3359\"}'\'' -e'"" [2025-09-07 17:13:11][351223621336240][6755 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_519736d2-ac9c-4e7b-a74f-6be92a6d961c","id":"QR_519736d2-ac9c-4e7b-a74f-6be92a6d961c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:13:12][351223621336240][6911 ms][DEBUG] proc_open done in 6498 ms; code=255; res.len=3343 [2025-09-07 17:13:12][351223621336240][6911 ms][DEBUG] END runCmdUntilRes#1 in 6498 ms [2025-09-07 17:13:12][351223621336240][6911 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:13:15][351223621336240][0 ms][INFO] === Request start === [2025-09-07 17:13:15][351223621336240][1 ms][DEBUG] START check_scloud [2025-09-07 17:13:15][351223621336240][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:13:15][351223621336240][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 11367 5015 24141584 99140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:13:15][351223621336240][310 ms][DEBUG] targetPkg: running [2025-09-07 17:13:15][351223621336240][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 17:13:15][351223621336240][311 ms][DEBUG] START check_boot_completed [2025-09-07 17:13:15][351223621336240][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:13:15][351223621336240][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:13:15][351223621336240][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:13:15][351223621336240][435 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 17:13:15][351223621336240][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 17:13:15][351223621336240][436 ms][DEBUG] rawBody.length=1151 [2025-09-07 17:13:15][351223621336240][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351223621336240\",\"model\":\"SM-S236DL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7716\"}'\'' -e'"" [2025-09-07 17:13:15][351223621336240][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:13:15][351223621336240][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351223621336240\",\"model\":\"SM-S236DL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7716\"}'\'' -e'"" [2025-09-07 17:13:19][351223621336240][4200 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e3e7fcd-62ac-459b-8e45-0e2a83e894c1","id":"QR_1e3e7fcd-62ac-459b-8e45-0e2a83e894c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:13:19][351223621336240][4356 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-07 17:13:19][351223621336240][4356 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-07 17:13:19][351223621336240][4356 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:13:21][351240641196131][0 ms][INFO] === Request start === [2025-09-07 17:13:21][351240641196131][1 ms][DEBUG] START check_scloud [2025-09-07 17:13:21][351240641196131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:13:22][351240641196131][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 11367 5015 24326232 106588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:13:22][351240641196131][305 ms][DEBUG] targetPkg: running [2025-09-07 17:13:22][351240641196131][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 17:13:22][351240641196131][305 ms][DEBUG] START check_boot_completed [2025-09-07 17:13:22][351240641196131][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:13:22][351240641196131][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:13:22][351240641196131][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:13:22][351240641196131][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:13:22][351240641196131][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 17:13:22][351240641196131][383 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:13:22][351240641196131][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641196131\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7212\"}'\'' -e'"" [2025-09-07 17:13:22][351240641196131][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:13:22][351240641196131][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641196131\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7212\"}'\'' -e'"" [2025-09-07 17:13:25][351240641196131][3460 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-07 17:13:25][351240641196131][3617 ms][DEBUG] proc_open done in 3234 ms; code=255; res.len=115 [2025-09-07 17:13:25][351240641196131][3617 ms][DEBUG] END runCmdUntilRes#1 in 3234 ms [2025-09-07 17:13:25][351240641196131][3617 ms][INFO] SUCCESS response from frida (len=115) [2025-09-07 17:13:25][][0 ms][INFO] === Request start === [2025-09-07 17:13:25][][1 ms][DEBUG] START check_scloud [2025-09-07 17:13:25][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:13:25][][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 11367 5015 24472024 117788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:13:25][][333 ms][DEBUG] targetPkg: running [2025-09-07 17:13:25][][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-07 17:13:25][][333 ms][DEBUG] START check_boot_completed [2025-09-07 17:13:25][][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:13:25][][380 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:13:25][][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:13:26][][426 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:13:26][][426 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 17:13:26][][426 ms][DEBUG] rawBody.length=1131 [2025-09-07 17:13:26][][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W905K43Y\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3686\"}'\'' -e'"" [2025-09-07 17:13:26][][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:13:26][][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W905K43Y\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3686\"}'\'' -e'"" [2025-09-07 17:13:29][][3457 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-07 17:13:29][][3613 ms][DEBUG] proc_open done in 3187 ms; code=255; res.len=95 [2025-09-07 17:13:29][][3613 ms][DEBUG] END runCmdUntilRes#1 in 3187 ms [2025-09-07 17:13:29][][3613 ms][INFO] SUCCESS response from frida (len=95) [2025-09-07 17:13:30][351240641196131][0 ms][INFO] === Request start === [2025-09-07 17:13:30][351240641196131][1 ms][DEBUG] START check_scloud [2025-09-07 17:13:30][351240641196131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:13:31][351240641196131][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 11367 5015 24616508 126988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:13:31][351240641196131][333 ms][DEBUG] targetPkg: running [2025-09-07 17:13:31][351240641196131][333 ms][DEBUG] END check_scloud in 333 ms [2025-09-07 17:13:31][351240641196131][333 ms][DEBUG] START check_boot_completed [2025-09-07 17:13:31][351240641196131][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:13:31][351240641196131][380 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:13:31][351240641196131][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:13:31][351240641196131][429 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 17:13:31][351240641196131][429 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 17:13:31][351240641196131][429 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:13:31][351240641196131][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641196131\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7373\"}'\'' -e'"" [2025-09-07 17:13:31][351240641196131][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:13:31][351240641196131][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641196131\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7373\"}'\'' -e'"" [2025-09-07 17:13:36][351240641196131][5925 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e8e64cd-f8d6-49b5-b3dd-b313984d2c12","id":"QR_8e8e64cd-f8d6-49b5-b3dd-b313984d2c12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:13:36][351240641196131][6082 ms][DEBUG] proc_open done in 5653 ms; code=255; res.len=3343 [2025-09-07 17:13:36][351240641196131][6082 ms][DEBUG] END runCmdUntilRes#1 in 5653 ms [2025-09-07 17:13:36][351240641196131][6082 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:15:05][350940411760468][0 ms][INFO] === Request start === [2025-09-07 17:15:05][350940411760468][1 ms][DEBUG] START check_scloud [2025-09-07 17:15:05][350940411760468][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:15:05][350940411760468][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 11367 5015 24719924 137540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:15:05][350940411760468][294 ms][DEBUG] targetPkg: running [2025-09-07 17:15:05][350940411760468][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 17:15:05][350940411760468][294 ms][DEBUG] START check_boot_completed [2025-09-07 17:15:05][350940411760468][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:15:05][350940411760468][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:15:05][350940411760468][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:15:05][350940411760468][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:15:05][350940411760468][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 17:15:05][350940411760468][387 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:15:05][350940411760468][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411760468\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4832\"}'\'' -e'"" [2025-09-07 17:15:05][350940411760468][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:15:05][350940411760468][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411760468\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4832\"}'\'' -e'"" [2025-09-07 17:15:11][350940411760468][6167 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c6c41d2-9bfb-40bf-b087-bc7133a94133","id":"QR_8c6c41d2-9bfb-40bf-b087-bc7133a94133","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:15:11][350940411760468][6323 ms][DEBUG] proc_open done in 5936 ms; code=255; res.len=3343 [2025-09-07 17:15:11][350940411760468][6323 ms][DEBUG] END runCmdUntilRes#1 in 5936 ms [2025-09-07 17:15:11][350940411760468][6323 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:15:15][350940411760468][1 ms][INFO] === Request start === [2025-09-07 17:15:15][350940411760468][1 ms][DEBUG] START check_scloud [2025-09-07 17:15:15][350940411760468][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:15:15][350940411760468][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 11367 5015 24852156 149360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:15:15][350940411760468][263 ms][DEBUG] targetPkg: running [2025-09-07 17:15:15][350940411760468][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 17:15:15][350940411760468][263 ms][DEBUG] START check_boot_completed [2025-09-07 17:15:15][350940411760468][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:15:15][350940411760468][310 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:15:15][350940411760468][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:15:15][350940411760468][372 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 17:15:15][350940411760468][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 17:15:15][350940411760468][372 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:15:15][350940411760468][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411760468\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5143\"}'\'' -e'"" [2025-09-07 17:15:15][350940411760468][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:15:15][350940411760468][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411760468\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5143\"}'\'' -e'"" [2025-09-07 17:15:19][350940411760468][4402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d65fd87-bdbf-4990-a816-12c39f9e9965","id":"QR_0d65fd87-bdbf-4990-a816-12c39f9e9965","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:15:19][350940411760468][4559 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-07 17:15:19][350940411760468][4559 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-07 17:15:19][350940411760468][4559 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:19:03][357674438340508][1 ms][INFO] === Request start === [2025-09-07 17:19:03][357674438340508][1 ms][DEBUG] START check_scloud [2025-09-07 17:19:03][357674438340508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:19:03][357674438340508][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 11367 5015 24982268 160588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:19:03][357674438340508][295 ms][DEBUG] targetPkg: running [2025-09-07 17:19:03][357674438340508][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-07 17:19:03][357674438340508][295 ms][DEBUG] START check_boot_completed [2025-09-07 17:19:03][357674438340508][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:19:03][357674438340508][340 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 17:19:03][357674438340508][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:19:03][357674438340508][403 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 17:19:03][357674438340508][403 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 17:19:03][357674438340508][403 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:19:03][357674438340508][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438340508\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2494\"}'\'' -e'"" [2025-09-07 17:19:03][357674438340508][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:19:03][357674438340508][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438340508\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2494\"}'\'' -e'"" [2025-09-07 17:19:07][357674438340508][4683 ms][DEBUG] proc_open done in 4280 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 17:19:07][357674438340508][4683 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-07 17:19:07][357674438340508][4683 ms][WARN] Detected error: Process with pid 11367 either refused to load frida-agent, or terminated during injectionProcess with pid 11367 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 17:19:07][357674438340508][4683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 17:19:08][357674438340508][4980 ms][DEBUG] SU: done in 297 ms; outsystem 5439 5015 12560216 258044 ep_poll 0 S system_server\n [2025-09-07 17:19:08][357674438340508][4980 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 17:19:08][357674438340508][5120 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 17:19:08][357674438340508][5120 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 17:19:08][357674438340508][5120 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 17:19:08][357674438340508][5276 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 17:19:08][357674438340508][5277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 17:19:08][357674438340508][5497 ms][DEBUG] SU: done in 220 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 17:19:10][357674438340508][7510 ms][DEBUG] START check_boot_completed [2025-09-07 17:19:10][357674438340508][7510 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:19:10][357674438340508][7557 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:19:10][357674438340508][7557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:19:10][357674438340508][7604 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:19:10][357674438340508][7604 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 17:19:13][357674438340508][10619 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 17:19:13][357674438340508][10619 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438340508\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2494\"}'\'' -e'"" [2025-09-07 17:19:17][357674438340508][14462 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6407940-0f20-4274-bd3b-9bc97dc5aea2","id":"QR_f6407940-0f20-4274-bd3b-9bc97dc5aea2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:19:17][357674438340508][14618 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-07 17:19:17][357674438340508][14618 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-09-07 17:19:17][357674438340508][14618 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:19:20][357674438340508][0 ms][INFO] === Request start === [2025-09-07 17:19:20][357674438340508][1 ms][DEBUG] START check_scloud [2025-09-07 17:19:20][357674438340508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:19:20][357674438340508][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 18542 5015 23662884 122892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:19:20][357674438340508][285 ms][DEBUG] targetPkg: running [2025-09-07 17:19:20][357674438340508][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-07 17:19:20][357674438340508][285 ms][DEBUG] START check_boot_completed [2025-09-07 17:19:20][357674438340508][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:19:20][357674438340508][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:19:20][357674438340508][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:19:20][357674438340508][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:19:20][357674438340508][379 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 17:19:20][357674438340508][379 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:19:20][357674438340508][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438340508\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5001\"}'\'' -e'"" [2025-09-07 17:19:20][357674438340508][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:19:20][357674438340508][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438340508\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5001\"}'\'' -e'"" [2025-09-07 17:19:25][357674438340508][5237 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d48585be-094f-4fad-a9cd-84b56f4a3143","id":"QR_d48585be-094f-4fad-a9cd-84b56f4a3143","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:19:25][357674438340508][5393 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-07 17:19:25][357674438340508][5393 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-07 17:19:25][357674438340508][5393 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:21:03][357950544771970][0 ms][INFO] === Request start === [2025-09-07 17:21:03][357950544771970][1 ms][DEBUG] START check_scloud [2025-09-07 17:21:03][357950544771970][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:21:03][357950544771970][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 18542 5015 23740692 136980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:21:03][357950544771970][310 ms][DEBUG] targetPkg: running [2025-09-07 17:21:03][357950544771970][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 17:21:03][357950544771970][310 ms][DEBUG] START check_boot_completed [2025-09-07 17:21:03][357950544771970][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:21:03][357950544771970][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:21:03][357950544771970][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:21:04][357950544771970][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:21:04][357950544771970][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 17:21:04][357950544771970][403 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:21:04][357950544771970][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544771970\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5993\"}'\'' -e'"" [2025-09-07 17:21:04][357950544771970][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:21:04][357950544771970][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544771970\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5993\"}'\'' -e'"" [2025-09-07 17:21:08][357950544771970][5121 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19fcc7ff-a9aa-4445-89f1-48fb64933981","id":"QR_19fcc7ff-a9aa-4445-89f1-48fb64933981","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:21:08][357950544771970][5277 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-07 17:21:08][357950544771970][5277 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-07 17:21:08][357950544771970][5277 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:21:11][357950544771970][1 ms][INFO] === Request start === [2025-09-07 17:21:11][357950544771970][1 ms][DEBUG] START check_scloud [2025-09-07 17:21:11][357950544771970][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:21:11][357950544771970][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18542 5015 23873872 149060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:21:11][357950544771970][308 ms][DEBUG] targetPkg: running [2025-09-07 17:21:11][357950544771970][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 17:21:11][357950544771970][308 ms][DEBUG] START check_boot_completed [2025-09-07 17:21:11][357950544771970][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:21:11][357950544771970][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:21:11][357950544771970][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:21:11][357950544771970][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:21:11][357950544771970][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 17:21:11][357950544771970][402 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:21:11][357950544771970][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544771970\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-09-07 17:21:11][357950544771970][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:21:11][357950544771970][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544771970\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-09-07 17:21:16][357950544771970][5541 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e3ec185-4092-4bc3-960f-643b7365a5a8","id":"QR_8e3ec185-4092-4bc3-960f-643b7365a5a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:21:16][357950544771970][5697 ms][DEBUG] proc_open done in 5296 ms; code=255; res.len=3343 [2025-09-07 17:21:16][357950544771970][5697 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-07 17:21:16][357950544771970][5697 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:26:03][356990913112068][1 ms][INFO] === Request start === [2025-09-07 17:26:03][356990913112068][1 ms][DEBUG] START check_scloud [2025-09-07 17:26:03][356990913112068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:26:04][356990913112068][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 18542 5015 24000748 160296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:26:04][356990913112068][299 ms][DEBUG] targetPkg: running [2025-09-07 17:26:04][356990913112068][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-07 17:26:04][356990913112068][299 ms][DEBUG] START check_boot_completed [2025-09-07 17:26:04][356990913112068][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:26:04][356990913112068][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:26:04][356990913112068][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:26:04][356990913112068][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 17:26:04][356990913112068][408 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 17:26:04][356990913112068][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:26:04][356990913112068][550 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1475\nsuccessfulTxPacketsPerSecond: 0.16118385705294505\nretriedTxPackets: 238\nretriedTxPacketsPerSecond: 0.04605253058655573\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1446\nsuccessfulRxPacketsPerSecond: 0.13048216999524123\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:26:04][356990913112068][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:26:05][356990913112068][1892 ms][DEBUG] SU: done in 1342 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.252/305.252/305.252/0.000 ms\n [2025-09-07 17:26:05][356990913112068][1892 ms][DEBUG] check_internet: online [2025-09-07 17:26:05][356990913112068][1892 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:26:05][356990913112068][1892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990913112068\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9566\"}'\'' -e'"" [2025-09-07 17:26:05][356990913112068][1893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:26:05][356990913112068][1893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990913112068\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9566\"}'\'' -e'"" [2025-09-07 17:26:10][356990913112068][6250 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f977169a-5304-43f5-add3-dc9091eae432","id":"QR_f977169a-5304-43f5-add3-dc9091eae432","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:26:10][356990913112068][6406 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-07 17:26:10][356990913112068][6406 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-07 17:26:10][356990913112068][6407 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:26:12][356990913112068][0 ms][INFO] === Request start === [2025-09-07 17:26:12][356990913112068][1 ms][DEBUG] START check_scloud [2025-09-07 17:26:12][356990913112068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:26:12][356990913112068][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 18542 5015 24120692 171064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:26:12][356990913112068][245 ms][DEBUG] targetPkg: running [2025-09-07 17:26:12][356990913112068][245 ms][DEBUG] END check_scloud in 245 ms [2025-09-07 17:26:12][356990913112068][245 ms][DEBUG] START check_boot_completed [2025-09-07 17:26:12][356990913112068][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:26:12][356990913112068][292 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:26:12][356990913112068][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:26:12][356990913112068][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:26:12][356990913112068][339 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 17:26:12][356990913112068][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:26:13][356990913112068][448 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1475\nsuccessfulTxPacketsPerSecond: 0.16118385705294505\nretriedTxPackets: 238\nretriedTxPacketsPerSecond: 0.04605253058655573\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1446\nsuccessfulRxPacketsPerSecond: 0.13048216999524123\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:26:13][356990913112068][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:26:13][356990913112068][901 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.214/341.214/341.214/0.000 ms\n [2025-09-07 17:26:13][356990913112068][902 ms][DEBUG] check_internet: online [2025-09-07 17:26:13][356990913112068][902 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:26:13][356990913112068][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990913112068\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9526\"}'\'' -e'"" [2025-09-07 17:26:13][356990913112068][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:26:13][356990913112068][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990913112068\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9526\"}'\'' -e'"" [2025-09-07 17:26:18][356990913112068][6150 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_097a0d08-a013-452c-bb27-3ff1eb37a58b","id":"QR_097a0d08-a013-452c-bb27-3ff1eb37a58b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:26:18][356990913112068][6306 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-07 17:26:18][356990913112068][6306 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-07 17:26:18][356990913112068][6306 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:38:04][352049246663190][1 ms][INFO] === Request start === [2025-09-07 17:38:04][352049246663190][1 ms][DEBUG] START check_scloud [2025-09-07 17:38:04][352049246663190][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:38:04][352049246663190][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18542 5015 24249192 182708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:38:04][352049246663190][309 ms][DEBUG] targetPkg: running [2025-09-07 17:38:04][352049246663190][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 17:38:04][352049246663190][309 ms][DEBUG] START check_boot_completed [2025-09-07 17:38:04][352049246663190][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:38:04][352049246663190][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:38:04][352049246663190][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:38:04][352049246663190][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:38:04][352049246663190][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 17:38:04][352049246663190][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:38:04][352049246663190][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1639\nsuccessfulTxPacketsPerSecond: 0.14539234552063288\nretriedTxPackets: 271\nretriedTxPacketsPerSecond: 0.01710498182595681\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1600\nsuccessfulRxPacketsPerSecond: 0.14539234552063288\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:38:04][352049246663190][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:38:05][352049246663190][1856 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.042/305.042/305.042/0.000 ms\n [2025-09-07 17:38:05][352049246663190][1856 ms][DEBUG] check_internet: online [2025-09-07 17:38:05][352049246663190][1856 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:38:05][352049246663190][1856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049246663190\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7143\"}'\'' -e'"" [2025-09-07 17:38:05][352049246663190][1856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:38:05][352049246663190][1856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049246663190\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7143\"}'\'' -e'"" [2025-09-07 17:38:09][352049246663190][5683 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_597b6f93-107a-4c0d-8335-60741f6b224c","id":"QR_597b6f93-107a-4c0d-8335-60741f6b224c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:38:09][352049246663190][5839 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-07 17:38:09][352049246663190][5839 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-07 17:38:09][352049246663190][5839 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:38:12][352049246663190][0 ms][INFO] === Request start === [2025-09-07 17:38:12][352049246663190][1 ms][DEBUG] START check_scloud [2025-09-07 17:38:12][352049246663190][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:38:12][352049246663190][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18542 5015 24433724 193852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:38:12][352049246663190][313 ms][DEBUG] targetPkg: running [2025-09-07 17:38:12][352049246663190][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 17:38:12][352049246663190][313 ms][DEBUG] START check_boot_completed [2025-09-07 17:38:12][352049246663190][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:38:12][352049246663190][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:38:12][352049246663190][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:38:12][352049246663190][406 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 17:38:12][352049246663190][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 17:38:12][352049246663190][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:38:12][352049246663190][531 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1639\nsuccessfulTxPacketsPerSecond: 0.14539234552063288\nretriedTxPackets: 271\nretriedTxPacketsPerSecond: 0.01710498182595681\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1600\nsuccessfulRxPacketsPerSecond: 0.14539234552063288\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:38:12][352049246663190][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:38:13][352049246663190][938 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.298/273.298/273.298/0.000 ms\n [2025-09-07 17:38:13][352049246663190][938 ms][DEBUG] check_internet: online [2025-09-07 17:38:13][352049246663190][938 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:38:13][352049246663190][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049246663190\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7694\"}'\'' -e'"" [2025-09-07 17:38:13][352049246663190][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:38:13][352049246663190][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352049246663190\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7694\"}'\'' -e'"" [2025-09-07 17:38:18][352049246663190][5999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3da93da-42aa-44cc-831a-a101968c6667","id":"QR_f3da93da-42aa-44cc-831a-a101968c6667","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:38:18][352049246663190][6155 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-07 17:38:18][352049246663190][6155 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-07 17:38:18][352049246663190][6155 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:39:04][357576772200661][1 ms][INFO] === Request start === [2025-09-07 17:39:04][357576772200661][1 ms][DEBUG] START check_scloud [2025-09-07 17:39:04][357576772200661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:39:05][357576772200661][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18542 5015 24566012 205584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:39:05][357576772200661][305 ms][DEBUG] targetPkg: running [2025-09-07 17:39:05][357576772200661][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 17:39:05][357576772200661][305 ms][DEBUG] START check_boot_completed [2025-09-07 17:39:05][357576772200661][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:39:05][357576772200661][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:39:05][357576772200661][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:39:05][357576772200661][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 17:39:05][357576772200661][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 17:39:05][357576772200661][415 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:39:05][357576772200661][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576772200661\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5927\"}'\'' -e'"" [2025-09-07 17:39:05][357576772200661][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:39:05][357576772200661][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576772200661\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5927\"}'\'' -e'"" [2025-09-07 17:39:10][357576772200661][5241 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_965e341d-2f33-40f2-850e-63a8a1a9b138","id":"QR_965e341d-2f33-40f2-850e-63a8a1a9b138","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:39:10][357576772200661][5397 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-07 17:39:10][357576772200661][5398 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-07 17:39:10][357576772200661][5398 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:39:13][357576772200661][0 ms][INFO] === Request start === [2025-09-07 17:39:13][357576772200661][1 ms][DEBUG] START check_scloud [2025-09-07 17:39:13][357576772200661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:39:13][357576772200661][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 18542 5015 24711684 216228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:39:13][357576772200661][309 ms][DEBUG] targetPkg: running [2025-09-07 17:39:13][357576772200661][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 17:39:13][357576772200661][309 ms][DEBUG] START check_boot_completed [2025-09-07 17:39:13][357576772200661][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:39:13][357576772200661][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:39:13][357576772200661][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:39:14][357576772200661][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:39:14][357576772200661][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 17:39:14][357576772200661][388 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:39:14][357576772200661][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576772200661\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6443\"}'\'' -e'"" [2025-09-07 17:39:14][357576772200661][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:39:14][357576772200661][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576772200661\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6443\"}'\'' -e'"" [2025-09-07 17:39:18][357576772200661][5027 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f72b2068-0150-48cb-b6aa-75a29917ecf2","id":"QR_f72b2068-0150-48cb-b6aa-75a29917ecf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:39:18][357576772200661][5183 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-07 17:39:18][357576772200661][5183 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-07 17:39:18][357576772200661][5183 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:58:03][358697433340438][1 ms][INFO] === Request start === [2025-09-07 17:58:03][358697433340438][1 ms][DEBUG] START check_scloud [2025-09-07 17:58:03][358697433340438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:58:04][358697433340438][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 18542 5015 24787576 163348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:58:04][358697433340438][334 ms][DEBUG] targetPkg: running [2025-09-07 17:58:04][358697433340438][334 ms][DEBUG] END check_scloud in 333 ms [2025-09-07 17:58:04][358697433340438][334 ms][DEBUG] START check_boot_completed [2025-09-07 17:58:04][358697433340438][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:58:04][358697433340438][365 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 17:58:04][358697433340438][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:58:04][358697433340438][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:58:04][358697433340438][412 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 17:58:04][358697433340438][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:58:04][358697433340438][521 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2089\nsuccessfulTxPacketsPerSecond: 0.15274577126652808\nretriedTxPackets: 352\nretriedTxPacketsPerSecond: 0.01992336146954714\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2004\nsuccessfulRxPacketsPerSecond: 0.15274577126652808\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:58:04][358697433340438][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:58:05][358697433340438][1896 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.109/304.109/304.109/0.000 ms\n [2025-09-07 17:58:05][358697433340438][1896 ms][DEBUG] check_internet: online [2025-09-07 17:58:05][358697433340438][1896 ms][DEBUG] rawBody.length=1150 [2025-09-07 17:58:05][358697433340438][1896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433340438\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3553\"}'\'' -e'"" [2025-09-07 17:58:05][358697433340438][1897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:58:05][358697433340438][1897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433340438\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3553\"}'\'' -e'"" [2025-09-07 17:58:09][358697433340438][6223 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f28fef0-d757-4080-a784-64f5158c3891","id":"QR_2f28fef0-d757-4080-a784-64f5158c3891","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:58:10][358697433340438][6379 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-09-07 17:58:10][358697433340438][6379 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-07 17:58:10][358697433340438][6379 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 17:58:12][358697433340438][0 ms][INFO] === Request start === [2025-09-07 17:58:12][358697433340438][1 ms][DEBUG] START check_scloud [2025-09-07 17:58:12][358697433340438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 17:58:12][358697433340438][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 18542 5015 24929232 148820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 17:58:12][358697433340438][273 ms][DEBUG] targetPkg: running [2025-09-07 17:58:12][358697433340438][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-07 17:58:12][358697433340438][273 ms][DEBUG] START check_boot_completed [2025-09-07 17:58:12][358697433340438][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:58:12][358697433340438][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 17:58:12][358697433340438][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:58:12][358697433340438][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:58:12][358697433340438][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 17:58:12][358697433340438][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 17:58:12][358697433340438][476 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2089\nsuccessfulTxPacketsPerSecond: 0.15274577126652808\nretriedTxPackets: 352\nretriedTxPacketsPerSecond: 0.01992336146954714\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2004\nsuccessfulRxPacketsPerSecond: 0.15274577126652808\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 17:58:12][358697433340438][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 17:58:13][358697433340438][804 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.219/227.219/227.219/0.000 ms\n [2025-09-07 17:58:13][358697433340438][804 ms][DEBUG] check_internet: online [2025-09-07 17:58:13][358697433340438][804 ms][DEBUG] rawBody.length=1160 [2025-09-07 17:58:13][358697433340438][804 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433340438\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4192\"}'\'' -e'"" [2025-09-07 17:58:13][358697433340438][804 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 17:58:13][358697433340438][804 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433340438\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4192\"}'\'' -e'"" [2025-09-07 17:58:17][358697433340438][5256 ms][DEBUG] proc_open done in 4451 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 17:58:17][358697433340438][5256 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-07 17:58:17][358697433340438][5256 ms][WARN] Detected error: Process with pid 18542 either refused to load frida-agent, or terminated during injectionProcess with pid 18542 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 17:58:17][358697433340438][5256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 17:58:18][358697433340438][5553 ms][DEBUG] SU: done in 296 ms; outsystem 5439 5015 12713560 213644 ep_poll 0 S system_server\n [2025-09-07 17:58:18][358697433340438][5553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 17:58:18][358697433340438][5709 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 17:58:18][358697433340438][5709 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 17:58:18][358697433340438][5709 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 17:58:18][358697433340438][5865 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 17:58:18][358697433340438][5865 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 17:58:18][358697433340438][6052 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 17:58:20][358697433340438][8067 ms][DEBUG] START check_boot_completed [2025-09-07 17:58:20][358697433340438][8068 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 17:58:20][358697433340438][8114 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 17:58:20][358697433340438][8114 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 17:58:20][358697433340438][8161 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 17:58:20][358697433340438][8161 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 17:58:23][358697433340438][11176 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 17:58:23][358697433340438][11176 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697433340438\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4192\"}'\'' -e'"" [2025-09-07 17:58:29][358697433340438][16581 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_761fe970-1f9f-441f-afdc-2af97cbfcda3","id":"QR_761fe970-1f9f-441f-afdc-2af97cbfcda3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 17:58:29][358697433340438][16737 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-07 17:58:29][358697433340438][16737 ms][DEBUG] END runCmdUntilRes#2 in 5561 ms [2025-09-07 17:58:29][358697433340438][16738 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:05:03][354595381064402][1 ms][INFO] === Request start === [2025-09-07 18:05:03][354595381064402][1 ms][DEBUG] START check_scloud [2025-09-07 18:05:03][354595381064402][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:05:03][354595381064402][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 21933 5015 23560888 127196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:05:03][354595381064402][296 ms][DEBUG] targetPkg: running [2025-09-07 18:05:03][354595381064402][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 18:05:03][354595381064402][296 ms][DEBUG] START check_boot_completed [2025-09-07 18:05:03][354595381064402][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:05:03][354595381064402][327 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 18:05:03][354595381064402][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:05:03][354595381064402][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:05:03][354595381064402][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:05:03][354595381064402][373 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:05:03][354595381064402][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595381064402\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7463\"}'\'' -e'"" [2025-09-07 18:05:03][354595381064402][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:05:03][354595381064402][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595381064402\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7463\"}'\'' -e'"" [2025-09-07 18:05:08][354595381064402][4841 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46c7fad6-d903-4cb1-a051-4f3e94c3f61f","id":"QR_46c7fad6-d903-4cb1-a051-4f3e94c3f61f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:05:08][354595381064402][4997 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-07 18:05:08][354595381064402][4997 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-07 18:05:08][354595381064402][4997 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:05:10][354595381064402][0 ms][INFO] === Request start === [2025-09-07 18:05:10][354595381064402][1 ms][DEBUG] START check_scloud [2025-09-07 18:05:10][354595381064402][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:05:10][354595381064402][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 21933 5015 23733132 138340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:05:10][354595381064402][275 ms][DEBUG] targetPkg: running [2025-09-07 18:05:10][354595381064402][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-07 18:05:10][354595381064402][275 ms][DEBUG] START check_boot_completed [2025-09-07 18:05:10][354595381064402][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:05:10][354595381064402][322 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:05:10][354595381064402][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:05:10][354595381064402][384 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:05:10][354595381064402][384 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:05:10][354595381064402][384 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:05:10][354595381064402][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595381064402\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3501\"}'\'' -e'"" [2025-09-07 18:05:10][354595381064402][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:05:10][354595381064402][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595381064402\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3501\"}'\'' -e'"" [2025-09-07 18:05:16][354595381064402][5664 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fffceb90-89ac-464b-9ea1-6d809276d7ef","id":"QR_fffceb90-89ac-464b-9ea1-6d809276d7ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:05:16][354595381064402][5820 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-09-07 18:05:16][354595381064402][5820 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-07 18:05:16][354595381064402][5820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:07:03][356414810029606][0 ms][INFO] === Request start === [2025-09-07 18:07:03][356414810029606][0 ms][DEBUG] START check_scloud [2025-09-07 18:07:03][356414810029606][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:07:03][356414810029606][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 21933 5015 23879564 149540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:07:03][356414810029606][299 ms][DEBUG] targetPkg: running [2025-09-07 18:07:03][356414810029606][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 18:07:03][356414810029606][300 ms][DEBUG] START check_boot_completed [2025-09-07 18:07:03][356414810029606][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:07:03][356414810029606][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:07:03][356414810029606][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:07:03][356414810029606][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:07:03][356414810029606][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:07:03][356414810029606][409 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:07:03][356414810029606][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810029606\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2377\"}'\'' -e'"" [2025-09-07 18:07:03][356414810029606][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:07:03][356414810029606][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810029606\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2377\"}'\'' -e'"" [2025-09-07 18:07:08][356414810029606][5189 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec194bce-7f52-41ef-9121-03b75768c727","id":"QR_ec194bce-7f52-41ef-9121-03b75768c727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:07:08][356414810029606][5345 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-07 18:07:08][356414810029606][5345 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-07 18:07:08][356414810029606][5345 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:07:10][356414810029606][1 ms][INFO] === Request start === [2025-09-07 18:07:10][356414810029606][1 ms][DEBUG] START check_scloud [2025-09-07 18:07:10][356414810029606][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:07:11][356414810029606][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 21933 5015 24059028 161136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:07:11][356414810029606][298 ms][DEBUG] targetPkg: running [2025-09-07 18:07:11][356414810029606][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 18:07:11][356414810029606][298 ms][DEBUG] START check_boot_completed [2025-09-07 18:07:11][356414810029606][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:07:11][356414810029606][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:07:11][356414810029606][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:07:11][356414810029606][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:07:11][356414810029606][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 18:07:11][356414810029606][391 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:07:11][356414810029606][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810029606\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4512\"}'\'' -e'"" [2025-09-07 18:07:11][356414810029606][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:07:11][356414810029606][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810029606\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4512\"}'\'' -e'"" [2025-09-07 18:07:16][356414810029606][5375 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e0ce230-85ba-431e-b303-7f57c7dcb727","id":"QR_6e0ce230-85ba-431e-b303-7f57c7dcb727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:07:16][356414810029606][5531 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-07 18:07:16][356414810029606][5531 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-07 18:07:16][356414810029606][5531 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:07:20][358184577271737][0 ms][INFO] === Request start === [2025-09-07 18:07:20][358184577271737][1 ms][DEBUG] START check_scloud [2025-09-07 18:07:20][358184577271737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:07:20][358184577271737][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 21933 5015 24209564 171552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:07:20][358184577271737][252 ms][DEBUG] targetPkg: running [2025-09-07 18:07:20][358184577271737][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-07 18:07:20][358184577271737][252 ms][DEBUG] START check_boot_completed [2025-09-07 18:07:20][358184577271737][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:07:20][358184577271737][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:07:20][358184577271737][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:07:20][358184577271737][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:07:20][358184577271737][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 18:07:20][358184577271737][345 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:07:20][358184577271737][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184577271737\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-09-07 18:07:20][358184577271737][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:07:20][358184577271737][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184577271737\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-09-07 18:07:24][358184577271737][3923 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae61b5ec-e673-479d-a7bf-94516e1f6412","id":"QR_ae61b5ec-e673-479d-a7bf-94516e1f6412","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:07:24][358184577271737][4079 ms][DEBUG] proc_open done in 3734 ms; code=255; res.len=3343 [2025-09-07 18:07:24][358184577271737][4079 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-09-07 18:07:24][358184577271737][4079 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:07:26][358184577271737][0 ms][INFO] === Request start === [2025-09-07 18:07:26][358184577271737][1 ms][DEBUG] START check_scloud [2025-09-07 18:07:26][358184577271737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:07:27][358184577271737][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 21933 5015 24335808 183588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:07:27][358184577271737][281 ms][DEBUG] targetPkg: running [2025-09-07 18:07:27][358184577271737][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-07 18:07:27][358184577271737][281 ms][DEBUG] START check_boot_completed [2025-09-07 18:07:27][358184577271737][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:07:27][358184577271737][328 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:07:27][358184577271737][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:07:27][358184577271737][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:07:27][358184577271737][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 18:07:27][358184577271737][374 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:07:27][358184577271737][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184577271737\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4730\"}'\'' -e'"" [2025-09-07 18:07:27][358184577271737][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:07:27][358184577271737][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184577271737\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4730\"}'\'' -e'"" [2025-09-07 18:07:32][358184577271737][5264 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d42edbd-99c8-4bf7-b4d8-eb09d3de3aab","id":"QR_4d42edbd-99c8-4bf7-b4d8-eb09d3de3aab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:07:32][358184577271737][5420 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-09-07 18:07:32][358184577271737][5420 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-09-07 18:07:32][358184577271737][5420 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:08:03][352549937520104][0 ms][INFO] === Request start === [2025-09-07 18:08:03][352549937520104][1 ms][DEBUG] START check_scloud [2025-09-07 18:08:03][352549937520104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:08:04][352549937520104][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 21933 5015 24446428 194028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:08:04][352549937520104][285 ms][DEBUG] targetPkg: running [2025-09-07 18:08:04][352549937520104][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-07 18:08:04][352549937520104][285 ms][DEBUG] START check_boot_completed [2025-09-07 18:08:04][352549937520104][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:08:04][352549937520104][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:08:04][352549937520104][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:08:04][352549937520104][394 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:08:04][352549937520104][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:08:04][352549937520104][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:08:04][352549937520104][550 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2228\nsuccessfulTxPacketsPerSecond: 0.3287349574405635\nretriedTxPackets: 401\nretriedTxPacketsPerSecond: 0.09392427355444673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2130\nsuccessfulRxPacketsPerSecond: 0.3052538890519519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:08:04][352549937520104][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:08:05][352549937520104][1878 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.064/302.064/302.064/0.000 ms\n [2025-09-07 18:08:05][352549937520104][1878 ms][DEBUG] check_internet: online [2025-09-07 18:08:05][352549937520104][1878 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:08:05][352549937520104][1878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937520104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7328\"}'\'' -e'"" [2025-09-07 18:08:05][352549937520104][1879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:08:05][352549937520104][1879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937520104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7328\"}'\'' -e'"" [2025-09-07 18:08:09][352549937520104][5705 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4c71913-6c38-4e92-9755-66a7573a0688","id":"QR_a4c71913-6c38-4e92-9755-66a7573a0688","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:08:09][352549937520104][5861 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-07 18:08:09][352549937520104][5862 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-07 18:08:09][352549937520104][5862 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:08:11][352549937520104][0 ms][INFO] === Request start === [2025-09-07 18:08:11][352549937520104][1 ms][DEBUG] START check_scloud [2025-09-07 18:08:11][352549937520104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:08:12][352549937520104][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 21933 5015 24627428 204968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:08:12][352549937520104][254 ms][DEBUG] targetPkg: running [2025-09-07 18:08:12][352549937520104][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-07 18:08:12][352549937520104][254 ms][DEBUG] START check_boot_completed [2025-09-07 18:08:12][352549937520104][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:08:12][352549937520104][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:08:12][352549937520104][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:08:12][352549937520104][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:08:12][352549937520104][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:08:12][352549937520104][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:08:12][352549937520104][441 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2228\nsuccessfulTxPacketsPerSecond: 0.3287349574405635\nretriedTxPackets: 401\nretriedTxPacketsPerSecond: 0.09392427355444673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2130\nsuccessfulRxPacketsPerSecond: 0.3052538890519519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:08:12][352549937520104][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:08:12][352549937520104][816 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.689/269.689/269.689/0.000 ms\n [2025-09-07 18:08:12][352549937520104][816 ms][DEBUG] check_internet: online [2025-09-07 18:08:12][352549937520104][816 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:08:12][352549937520104][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937520104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3993\"}'\'' -e'"" [2025-09-07 18:08:12][352549937520104][817 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:08:12][352549937520104][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937520104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3993\"}'\'' -e'"" [2025-09-07 18:08:17][352549937520104][5862 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3031984-98ef-4b98-9373-1f1095da5616","id":"QR_a3031984-98ef-4b98-9373-1f1095da5616","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:08:17][352549937520104][6018 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 18:08:17][352549937520104][6018 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 18:08:17][352549937520104][6018 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:08:23][359299280351318][0 ms][INFO] === Request start === [2025-09-07 18:08:23][359299280351318][1 ms][DEBUG] START check_scloud [2025-09-07 18:08:23][359299280351318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:08:23][359299280351318][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 21933 5015 24788460 214956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:08:23][359299280351318][315 ms][DEBUG] targetPkg: running [2025-09-07 18:08:23][359299280351318][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 18:08:23][359299280351318][316 ms][DEBUG] START check_boot_completed [2025-09-07 18:08:23][359299280351318][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:08:23][359299280351318][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:08:23][359299280351318][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:08:23][359299280351318][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:08:23][359299280351318][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 18:08:23][359299280351318][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:08:23][359299280351318][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2228\nsuccessfulTxPacketsPerSecond: 0.3287349574405635\nretriedTxPackets: 401\nretriedTxPacketsPerSecond: 0.09392427355444673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2130\nsuccessfulRxPacketsPerSecond: 0.3052538890519519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:08:23][359299280351318][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:08:24][359299280351318][940 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.073/303.073/303.073/0.000 ms\n [2025-09-07 18:08:24][359299280351318][940 ms][DEBUG] check_internet: online [2025-09-07 18:08:24][359299280351318][940 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:08:24][359299280351318][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359299280351318\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5579\"}'\'' -e'"" [2025-09-07 18:08:24][359299280351318][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:08:24][359299280351318][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359299280351318\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5579\"}'\'' -e'"" [2025-09-07 18:08:29][359299280351318][5985 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a82f5de-2f46-4ea1-8fe2-30967eefd4ca","id":"QR_1a82f5de-2f46-4ea1-8fe2-30967eefd4ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:08:29][359299280351318][6142 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 18:08:29][359299280351318][6142 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 18:08:29][359299280351318][6142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:08:32][359299280351318][0 ms][INFO] === Request start === [2025-09-07 18:08:32][359299280351318][1 ms][DEBUG] START check_scloud [2025-09-07 18:08:32][359299280351318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:08:33][359299280351318][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21933 5015 24937168 224880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:08:33][359299280351318][308 ms][DEBUG] targetPkg: running [2025-09-07 18:08:33][359299280351318][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 18:08:33][359299280351318][308 ms][DEBUG] START check_boot_completed [2025-09-07 18:08:33][359299280351318][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:08:33][359299280351318][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:08:33][359299280351318][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:08:33][359299280351318][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 18:08:33][359299280351318][388 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 18:08:33][359299280351318][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:08:33][359299280351318][496 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30638 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2228\nsuccessfulTxPacketsPerSecond: 0.3287349574405635\nretriedTxPackets: 401\nretriedTxPacketsPerSecond: 0.09392427355444673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2130\nsuccessfulRxPacketsPerSecond: 0.3052538890519519\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:08:33][359299280351318][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:08:33][359299280351318][933 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.238/333.238/333.238/0.000 ms\n [2025-09-07 18:08:33][359299280351318][933 ms][DEBUG] check_internet: online [2025-09-07 18:08:33][359299280351318][934 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:08:33][359299280351318][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359299280351318\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2448\"}'\'' -e'"" [2025-09-07 18:08:33][359299280351318][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:08:33][359299280351318][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359299280351318\",\"model\":\"SM-S928U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2448\"}'\'' -e'"" [2025-09-07 18:08:37][359299280351318][4479 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f1ceb6b-785e-448e-a0b8-ed6ea263393c","id":"QR_6f1ceb6b-785e-448e-a0b8-ed6ea263393c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:08:37][359299280351318][4635 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-07 18:08:37][359299280351318][4635 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-07 18:08:37][359299280351318][4635 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:09:04][356666980692543][0 ms][INFO] === Request start === [2025-09-07 18:09:04][356666980692543][1 ms][DEBUG] START check_scloud [2025-09-07 18:09:04][356666980692543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:09:05][356666980692543][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 21933 5015 25026284 236928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:09:05][356666980692543][291 ms][DEBUG] targetPkg: running [2025-09-07 18:09:05][356666980692543][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-07 18:09:05][356666980692543][292 ms][DEBUG] START check_boot_completed [2025-09-07 18:09:05][356666980692543][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:09:05][356666980692543][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:09:05][356666980692543][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:09:05][356666980692543][385 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 18:09:05][356666980692543][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 18:09:05][356666980692543][385 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:09:05][356666980692543][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356666980692543\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4726\"}'\'' -e'"" [2025-09-07 18:09:05][356666980692543][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:09:05][356666980692543][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356666980692543\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4726\"}'\'' -e'"" [2025-09-07 18:09:08][356666980692543][4197 ms][DEBUG] proc_open done in 3811 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 18:09:08][356666980692543][4197 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-09-07 18:09:08][356666980692543][4197 ms][WARN] Detected error: Process with pid 21933 either refused to load frida-agent, or terminated during injectionProcess with pid 21933 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 18:09:08][356666980692543][4197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 18:09:09][356666980692543][4462 ms][DEBUG] SU: done in 265 ms; outsystem 5439 5015 12714928 205248 ep_poll 0 S system_server\n [2025-09-07 18:09:09][356666980692543][4462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 18:09:09][356666980692543][4603 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 18:09:09][356666980692543][4603 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 18:09:09][356666980692543][4603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 18:09:09][356666980692543][4728 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 18:09:09][356666980692543][4728 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 18:09:09][356666980692543][4915 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 18:09:11][356666980692543][6930 ms][DEBUG] START check_boot_completed [2025-09-07 18:09:11][356666980692543][6931 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:09:11][356666980692543][6977 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:09:11][356666980692543][6977 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:09:11][356666980692543][7024 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:09:11][356666980692543][7024 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 18:09:14][356666980692543][10039 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 18:09:14][356666980692543][10039 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356666980692543\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4726\"}'\'' -e'"" [2025-09-07 18:09:20][356666980692543][15710 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08b0545a-a570-4588-a8a9-a3690345bdcd","id":"QR_08b0545a-a570-4588-a8a9-a3690345bdcd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:09:20][356666980692543][15866 ms][DEBUG] proc_open done in 5827 ms; code=255; res.len=3343 [2025-09-07 18:09:20][356666980692543][15866 ms][DEBUG] END runCmdUntilRes#2 in 5827 ms [2025-09-07 18:09:20][356666980692543][15866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:09:24][356666980692543][1 ms][INFO] === Request start === [2025-09-07 18:09:24][356666980692543][1 ms][DEBUG] START check_scloud [2025-09-07 18:09:24][356666980692543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:09:24][356666980692543][236 ms][DEBUG] SU: done in 234 ms; outu0_a118 23300 5015 23593860 124176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:09:24][356666980692543][236 ms][DEBUG] targetPkg: running [2025-09-07 18:09:24][356666980692543][236 ms][DEBUG] END check_scloud in 235 ms [2025-09-07 18:09:24][356666980692543][236 ms][DEBUG] START check_boot_completed [2025-09-07 18:09:24][356666980692543][236 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:09:24][356666980692543][281 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 18:09:24][356666980692543][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:09:24][356666980692543][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:09:24][356666980692543][327 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-07 18:09:24][356666980692543][327 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:09:24][356666980692543][327 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356666980692543\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3262\"}'\'' -e'"" [2025-09-07 18:09:24][356666980692543][327 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:09:24][356666980692543][327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356666980692543\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3262\"}'\'' -e'"" [2025-09-07 18:09:28][356666980692543][4108 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e29441b-9e79-48e7-8aaf-46a56e442543","id":"QR_9e29441b-9e79-48e7-8aaf-46a56e442543","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:09:28][356666980692543][4264 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-07 18:09:28][356666980692543][4264 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-07 18:09:28][356666980692543][4264 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:09:31][359156942156057][0 ms][INFO] === Request start === [2025-09-07 18:09:31][359156942156057][1 ms][DEBUG] START check_scloud [2025-09-07 18:09:31][359156942156057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:09:31][359156942156057][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 23300 5015 23793752 137376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:09:31][359156942156057][264 ms][DEBUG] targetPkg: running [2025-09-07 18:09:31][359156942156057][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-07 18:09:31][359156942156057][264 ms][DEBUG] START check_boot_completed [2025-09-07 18:09:31][359156942156057][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:09:31][359156942156057][295 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:09:31][359156942156057][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:09:31][359156942156057][343 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 18:09:31][359156942156057][343 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 18:09:31][359156942156057][343 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:09:31][359156942156057][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156942156057\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5938\"}'\'' -e'"" [2025-09-07 18:09:31][359156942156057][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:09:31][359156942156057][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156942156057\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5938\"}'\'' -e'"" [2025-09-07 18:09:36][359156942156057][5107 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a01d6ec-a300-456f-bfac-387fbf4d83dd","id":"QR_7a01d6ec-a300-456f-bfac-387fbf4d83dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:09:36][359156942156057][5263 ms][DEBUG] proc_open done in 4919 ms; code=255; res.len=3343 [2025-09-07 18:09:36][359156942156057][5263 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-07 18:09:36][359156942156057][5263 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:09:40][359156942156057][0 ms][INFO] === Request start === [2025-09-07 18:09:40][359156942156057][1 ms][DEBUG] START check_scloud [2025-09-07 18:09:40][359156942156057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:09:40][359156942156057][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 23300 5015 23870284 149648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:09:40][359156942156057][291 ms][DEBUG] targetPkg: running [2025-09-07 18:09:40][359156942156057][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-07 18:09:40][359156942156057][291 ms][DEBUG] START check_boot_completed [2025-09-07 18:09:40][359156942156057][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:09:40][359156942156057][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:09:40][359156942156057][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:09:40][359156942156057][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:09:40][359156942156057][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:09:40][359156942156057][369 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:09:40][359156942156057][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156942156057\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9556\"}'\'' -e'"" [2025-09-07 18:09:40][359156942156057][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:09:40][359156942156057][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156942156057\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9556\"}'\'' -e'"" [2025-09-07 18:09:43][359156942156057][3805 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e54e5ae6-52eb-4840-9d3c-0b6d563fd074","id":"QR_e54e5ae6-52eb-4840-9d3c-0b6d563fd074","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:09:44][359156942156057][3962 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-09-07 18:09:44][359156942156057][3962 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-07 18:09:44][359156942156057][3962 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:11:03][353403930076939][0 ms][INFO] === Request start === [2025-09-07 18:11:03][353403930076939][1 ms][DEBUG] START check_scloud [2025-09-07 18:11:03][353403930076939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:11:04][353403930076939][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 23300 5015 23970912 160512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:11:04][353403930076939][301 ms][DEBUG] targetPkg: running [2025-09-07 18:11:04][353403930076939][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 18:11:04][353403930076939][301 ms][DEBUG] START check_boot_completed [2025-09-07 18:11:04][353403930076939][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:11:04][353403930076939][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:11:04][353403930076939][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:11:04][353403930076939][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:11:04][353403930076939][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 18:11:04][353403930076939][395 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:11:04][353403930076939][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930076939\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4601\"}'\'' -e'"" [2025-09-07 18:11:04][353403930076939][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:11:04][353403930076939][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930076939\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4601\"}'\'' -e'"" [2025-09-07 18:11:09][353403930076939][5659 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65eb8f9f-853c-44c1-9e61-4bda3332a776","id":"QR_65eb8f9f-853c-44c1-9e61-4bda3332a776","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:11:09][353403930076939][5815 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-07 18:11:09][353403930076939][5815 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-07 18:11:09][353403930076939][5815 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:11:11][353403930076939][0 ms][INFO] === Request start === [2025-09-07 18:11:11][353403930076939][1 ms][DEBUG] START check_scloud [2025-09-07 18:11:11][353403930076939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:11:12][353403930076939][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 23300 5015 24102236 171852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:11:12][353403930076939][307 ms][DEBUG] targetPkg: running [2025-09-07 18:11:12][353403930076939][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 18:11:12][353403930076939][307 ms][DEBUG] START check_boot_completed [2025-09-07 18:11:12][353403930076939][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:11:12][353403930076939][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:11:12][353403930076939][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:11:12][353403930076939][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:11:12][353403930076939][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:11:12][353403930076939][416 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:11:12][353403930076939][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930076939\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9125\"}'\'' -e'"" [2025-09-07 18:11:12][353403930076939][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:11:12][353403930076939][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930076939\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9125\"}'\'' -e'"" [2025-09-07 18:11:17][353403930076939][5509 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee32091e-f483-45e3-a775-3f59ce72f4b5","id":"QR_ee32091e-f483-45e3-a775-3f59ce72f4b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:11:17][353403930076939][5665 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-07 18:11:17][353403930076939][5665 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-07 18:11:17][353403930076939][5665 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:11:21][350616251655428][0 ms][INFO] === Request start === [2025-09-07 18:11:21][350616251655428][1 ms][DEBUG] START check_scloud [2025-09-07 18:11:21][350616251655428][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:11:21][350616251655428][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 23300 5015 24312412 183712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:11:21][350616251655428][304 ms][DEBUG] targetPkg: running [2025-09-07 18:11:21][350616251655428][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 18:11:21][350616251655428][304 ms][DEBUG] START check_boot_completed [2025-09-07 18:11:21][350616251655428][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:11:21][350616251655428][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:11:21][350616251655428][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:11:22][350616251655428][413 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 18:11:22][350616251655428][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:11:22][350616251655428][413 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:11:22][350616251655428][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251655428\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5412\"}'\'' -e'"" [2025-09-07 18:11:22][350616251655428][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:11:22][350616251655428][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251655428\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5412\"}'\'' -e'"" [2025-09-07 18:11:25][350616251655428][3865 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19f1c276-067c-48d5-be15-53aaa1ed5eff","id":"QR_19f1c276-067c-48d5-be15-53aaa1ed5eff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:11:25][350616251655428][4021 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-07 18:11:25][350616251655428][4021 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-07 18:11:25][350616251655428][4021 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:11:27][350616251655428][1 ms][INFO] === Request start === [2025-09-07 18:11:27][350616251655428][1 ms][DEBUG] START check_scloud [2025-09-07 18:11:27][350616251655428][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:11:28][350616251655428][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 23300 5015 24465216 194776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:11:28][350616251655428][273 ms][DEBUG] targetPkg: running [2025-09-07 18:11:28][350616251655428][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-07 18:11:28][350616251655428][273 ms][DEBUG] START check_boot_completed [2025-09-07 18:11:28][350616251655428][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:11:28][350616251655428][305 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:11:28][350616251655428][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:11:28][350616251655428][367 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 18:11:28][350616251655428][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 18:11:28][350616251655428][368 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:11:28][350616251655428][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251655428\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4184\"}'\'' -e'"" [2025-09-07 18:11:28][350616251655428][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:11:28][350616251655428][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251655428\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4184\"}'\'' -e'"" [2025-09-07 18:11:33][350616251655428][5022 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c21fa983-7348-45d0-9069-f69498286c41","id":"QR_c21fa983-7348-45d0-9069-f69498286c41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:11:33][350616251655428][5178 ms][DEBUG] proc_open done in 4810 ms; code=255; res.len=3343 [2025-09-07 18:11:33][350616251655428][5179 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 18:11:33][350616251655428][5179 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:19:03][353561330499645][1 ms][INFO] === Request start === [2025-09-07 18:19:03][353561330499645][1 ms][DEBUG] START check_scloud [2025-09-07 18:19:03][353561330499645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:19:03][353561330499645][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 23300 5015 24577808 206748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:19:03][353561330499645][293 ms][DEBUG] targetPkg: running [2025-09-07 18:19:03][353561330499645][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-07 18:19:03][353561330499645][293 ms][DEBUG] START check_boot_completed [2025-09-07 18:19:03][353561330499645][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:19:03][353561330499645][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:19:03][353561330499645][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:19:04][353561330499645][373 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 18:19:04][353561330499645][373 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 18:19:04][353561330499645][373 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:19:04][353561330499645][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561330499645\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9472\"}'\'' -e'"" [2025-09-07 18:19:04][353561330499645][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:19:04][353561330499645][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561330499645\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9472\"}'\'' -e'"" [2025-09-07 18:19:08][353561330499645][5261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_941c14f0-cb97-49af-acfb-09882c5cb011","id":"QR_941c14f0-cb97-49af-acfb-09882c5cb011","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:19:09][353561330499645][5417 ms][DEBUG] proc_open done in 5044 ms; code=255; res.len=3343 [2025-09-07 18:19:09][353561330499645][5417 ms][DEBUG] END runCmdUntilRes#1 in 5044 ms [2025-09-07 18:19:09][353561330499645][5417 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:19:11][353561330499645][0 ms][INFO] === Request start === [2025-09-07 18:19:11][353561330499645][1 ms][DEBUG] START check_scloud [2025-09-07 18:19:11][353561330499645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:19:11][353561330499645][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23300 5015 24729572 204936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:19:11][353561330499645][310 ms][DEBUG] targetPkg: running [2025-09-07 18:19:11][353561330499645][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 18:19:11][353561330499645][310 ms][DEBUG] START check_boot_completed [2025-09-07 18:19:11][353561330499645][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:19:11][353561330499645][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:19:11][353561330499645][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:19:11][353561330499645][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 18:19:11][353561330499645][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:19:11][353561330499645][419 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:19:11][353561330499645][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561330499645\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3585\"}'\'' -e'"" [2025-09-07 18:19:11][353561330499645][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:19:11][353561330499645][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353561330499645\",\"model\":\"SM-G996N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3585\"}'\'' -e'"" [2025-09-07 18:19:16][353561330499645][5465 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83e03fa2-982f-4b3d-a8db-f87528f2a806","id":"QR_83e03fa2-982f-4b3d-a8db-f87528f2a806","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:19:17][353561330499645][5621 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 18:19:17][353561330499645][5621 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 18:19:17][353561330499645][5621 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:23:03][351978522727918][1 ms][INFO] === Request start === [2025-09-07 18:23:03][351978522727918][1 ms][DEBUG] START check_scloud [2025-09-07 18:23:03][351978522727918][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:23:03][351978522727918][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 23300 5015 24851624 203052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:23:03][351978522727918][307 ms][DEBUG] targetPkg: running [2025-09-07 18:23:03][351978522727918][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 18:23:03][351978522727918][307 ms][DEBUG] START check_boot_completed [2025-09-07 18:23:03][351978522727918][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:23:03][351978522727918][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:23:03][351978522727918][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:23:03][351978522727918][387 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 18:23:03][351978522727918][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 18:23:03][351978522727918][387 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:23:03][351978522727918][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522727918\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2746\"}'\'' -e'"" [2025-09-07 18:23:03][351978522727918][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:23:03][351978522727918][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522727918\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2746\"}'\'' -e'"" [2025-09-07 18:23:08][351978522727918][5259 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_653c8ee6-b21e-49df-89cc-e6242260e510","id":"QR_653c8ee6-b21e-49df-89cc-e6242260e510","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:23:08][351978522727918][5416 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-09-07 18:23:08][351978522727918][5416 ms][DEBUG] END runCmdUntilRes#1 in 5029 ms [2025-09-07 18:23:08][351978522727918][5416 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:23:11][351978522727918][0 ms][INFO] === Request start === [2025-09-07 18:23:11][351978522727918][1 ms][DEBUG] START check_scloud [2025-09-07 18:23:11][351978522727918][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:23:11][351978522727918][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 23300 5015 25001776 200480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:23:11][351978522727918][302 ms][DEBUG] targetPkg: running [2025-09-07 18:23:11][351978522727918][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 18:23:11][351978522727918][303 ms][DEBUG] START check_boot_completed [2025-09-07 18:23:11][351978522727918][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:23:11][351978522727918][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:23:11][351978522727918][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:23:11][351978522727918][443 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 18:23:11][351978522727918][443 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 18:23:11][351978522727918][443 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:23:11][351978522727918][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522727918\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4328\"}'\'' -e'"" [2025-09-07 18:23:11][351978522727918][443 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:23:11][351978522727918][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522727918\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4328\"}'\'' -e'"" [2025-09-07 18:23:19][351978522727918][8613 ms][DEBUG] proc_open done in 8170 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 18:23:19][351978522727918][8613 ms][DEBUG] END runCmdUntilRes#1 in 8170 ms [2025-09-07 18:23:19][351978522727918][8613 ms][WARN] Detected error: Process with pid 23300 either refused to load frida-agent, or terminated during injectionProcess with pid 23300 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 18:23:19][351978522727918][8613 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 18:23:20][351978522727918][8941 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 18:23:20][351978522727918][8941 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 18:23:20][351978522727918][9191 ms][DEBUG] SU: done in 250 ms; out [2025-09-07 18:23:20][351978522727918][9191 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 18:23:20][351978522727918][9191 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 18:23:20][351978522727918][9519 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 18:23:20][351978522727918][9519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 18:23:20][351978522727918][9847 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 18:23:23][351978522727918][11862 ms][DEBUG] START check_boot_completed [2025-09-07 18:23:23][351978522727918][11862 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:23:23][351978522727918][11909 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:23:23][351978522727918][11909 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:23:23][351978522727918][11956 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:23:23][351978522727918][11956 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 18:23:26][351978522727918][14971 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 18:23:26][351978522727918][14971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522727918\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4328\"}'\'' -e'"" [2025-09-07 18:23:26][351978522727918][15470 ms][DEBUG] proc_open done in 500 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-07 18:23:26][351978522727918][15471 ms][DEBUG] END runCmdUntilRes#2 in 500 ms [2025-09-07 18:23:26][351978522727918][15471 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-07 18:23:26][351978522727918][15471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 18:23:27][351978522727918][15908 ms][DEBUG] SU: done in 437 ms; out [2025-09-07 18:25:03][350746470277819][0 ms][INFO] === Request start === [2025-09-07 18:25:03][350746470277819][1 ms][DEBUG] START check_scloud [2025-09-07 18:25:03][350746470277819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:25:03][350746470277819][364 ms][DEBUG] SU: done in 363 ms; out [2025-09-07 18:25:03][350746470277819][364 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 18:25:03][350746470277819][411 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 18:25:03][350746470277819][411 ms][DEBUG] check_devices: device found [2025-09-07 18:25:03][350746470277819][411 ms][WARN] targetPkg: not running, restarting [2025-09-07 18:25:03][350746470277819][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 18:25:03][350746470277819][552 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 18:25:03][350746470277819][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 18:25:04][350746470277819][801 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 18:25:06][350746470277819][2816 ms][DEBUG] END check_scloud in 2816 ms [2025-09-07 18:25:06][350746470277819][2817 ms][DEBUG] START check_boot_completed [2025-09-07 18:25:06][350746470277819][2817 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:25:06][350746470277819][2864 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:25:06][350746470277819][2864 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:25:06][350746470277819][2943 ms][DEBUG] SU: done in 79 ms; out [2025-09-07 18:25:06][350746470277819][2943 ms][DEBUG] END check_boot_completed in 126 ms [2025-09-07 18:25:06][350746470277819][2943 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:25:06][350746470277819][2943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350746470277819\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3378\"}'\'' -e'"" [2025-09-07 18:25:06][350746470277819][2943 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:25:06][350746470277819][2944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350746470277819\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3378\"}'\'' -e'"" [2025-09-07 18:25:11][350746470277819][7612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1671eee8-52ac-40b7-8c6e-c1443586653c","id":"QR_1671eee8-52ac-40b7-8c6e-c1443586653c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:25:11][350746470277819][7768 ms][DEBUG] proc_open done in 4825 ms; code=255; res.len=3343 [2025-09-07 18:25:11][350746470277819][7768 ms][DEBUG] END runCmdUntilRes#1 in 4825 ms [2025-09-07 18:25:11][350746470277819][7769 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:25:13][350746470277819][1 ms][INFO] === Request start === [2025-09-07 18:25:13][350746470277819][1 ms][DEBUG] START check_scloud [2025-09-07 18:25:13][350746470277819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:25:13][350746470277819][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 3213 25885 23800356 123956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:25:13][350746470277819][302 ms][DEBUG] targetPkg: running [2025-09-07 18:25:13][350746470277819][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 18:25:13][350746470277819][302 ms][DEBUG] START check_boot_completed [2025-09-07 18:25:13][350746470277819][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:25:13][350746470277819][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:25:13][350746470277819][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:25:13][350746470277819][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:25:13][350746470277819][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:25:13][350746470277819][380 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:25:13][350746470277819][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350746470277819\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8276\"}'\'' -e'"" [2025-09-07 18:25:13][350746470277819][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:25:13][350746470277819][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350746470277819\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8276\"}'\'' -e'"" [2025-09-07 18:25:18][350746470277819][5410 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a22f77e4-b433-44ff-9a3c-85d4323e1314","id":"QR_a22f77e4-b433-44ff-9a3c-85d4323e1314","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:25:19][350746470277819][5567 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 18:25:19][350746470277819][5567 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 18:25:19][350746470277819][5567 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:32:03][356414810576101][1 ms][INFO] === Request start === [2025-09-07 18:32:03][356414810576101][1 ms][DEBUG] START check_scloud [2025-09-07 18:32:03][356414810576101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:32:03][356414810576101][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 3213 25885 23829828 129140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:32:03][356414810576101][257 ms][DEBUG] targetPkg: running [2025-09-07 18:32:03][356414810576101][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-07 18:32:03][356414810576101][257 ms][DEBUG] START check_boot_completed [2025-09-07 18:32:03][356414810576101][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:32:03][356414810576101][289 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:32:03][356414810576101][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:32:03][356414810576101][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:32:03][356414810576101][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:32:03][356414810576101][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:32:04][356414810576101][461 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 882\nsuccessfulTxPacketsPerSecond: 2.264550651058312\nretriedTxPackets: 140\nretriedTxPacketsPerSecond: 0.2958525850576182\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 910\nsuccessfulRxPacketsPerSecond: 2.4910057161641435\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:32:04][356414810576101][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:32:05][356414810576101][2226 ms][DEBUG] SU: done in 1765 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.191/300.191/300.191/0.000 ms\n [2025-09-07 18:32:05][356414810576101][2226 ms][DEBUG] check_internet: online [2025-09-07 18:32:05][356414810576101][2226 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:32:05][356414810576101][2226 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810576101\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7012\"}'\'' -e'"" [2025-09-07 18:32:05][356414810576101][2226 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:32:05][356414810576101][2226 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414810576101\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7012\"}'\'' -e'"" [2025-09-07 18:32:09][356414810576101][5803 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba046a01-ab01-4567-9a00-ecf27aba4bc5","id":"QR_ba046a01-ab01-4567-9a00-ecf27aba4bc5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:32:09][356414810576101][5959 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-07 18:32:09][356414810576101][5959 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-07 18:32:09][356414810576101][5960 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:32:11][354747954657449][0 ms][INFO] === Request start === [2025-09-07 18:32:11][354747954657449][1 ms][DEBUG] START check_scloud [2025-09-07 18:32:11][354747954657449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:32:11][354747954657449][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 3213 25885 24022744 137916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:32:11][354747954657449][257 ms][DEBUG] targetPkg: running [2025-09-07 18:32:11][354747954657449][257 ms][DEBUG] END check_scloud in 257 ms [2025-09-07 18:32:11][354747954657449][257 ms][DEBUG] START check_boot_completed [2025-09-07 18:32:11][354747954657449][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:32:11][354747954657449][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:32:11][354747954657449][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:32:11][354747954657449][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:32:11][354747954657449][350 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 18:32:11][354747954657449][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:32:12][354747954657449][459 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 882\nsuccessfulTxPacketsPerSecond: 2.264550651058312\nretriedTxPackets: 140\nretriedTxPacketsPerSecond: 0.2958525850576182\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 910\nsuccessfulRxPacketsPerSecond: 2.4910057161641435\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:32:12][354747954657449][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:32:12][354747954657449][787 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.240/226.240/226.240/0.000 ms\n [2025-09-07 18:32:12][354747954657449][787 ms][DEBUG] check_internet: online [2025-09-07 18:32:12][354747954657449][788 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:32:12][354747954657449][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954657449\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6843\"}'\'' -e'"" [2025-09-07 18:32:12][354747954657449][788 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:32:12][354747954657449][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954657449\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6843\"}'\'' -e'"" [2025-09-07 18:32:15][354747954657449][4161 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28027c89-5519-4bd9-84b2-0af3886709ac","id":"QR_28027c89-5519-4bd9-84b2-0af3886709ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:32:15][354747954657449][4318 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-07 18:32:15][354747954657449][4318 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-07 18:32:15][354747954657449][4318 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:32:19][350547664785496][0 ms][INFO] === Request start === [2025-09-07 18:32:19][350547664785496][1 ms][DEBUG] START check_scloud [2025-09-07 18:32:19][350547664785496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:32:19][350547664785496][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 3213 25885 24165152 145444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:32:19][350547664785496][315 ms][DEBUG] targetPkg: running [2025-09-07 18:32:19][350547664785496][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 18:32:19][350547664785496][315 ms][DEBUG] START check_boot_completed [2025-09-07 18:32:19][350547664785496][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:32:19][350547664785496][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:32:19][350547664785496][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:32:19][350547664785496][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:32:19][350547664785496][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:32:19][350547664785496][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:32:19][350547664785496][534 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 882\nsuccessfulTxPacketsPerSecond: 2.264550651058312\nretriedTxPackets: 140\nretriedTxPacketsPerSecond: 0.2958525850576182\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 910\nsuccessfulRxPacketsPerSecond: 2.4910057161641435\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:32:19][350547664785496][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:32:20][350547664785496][956 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=334 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 334.797/334.797/334.797/0.000 ms\n [2025-09-07 18:32:20][350547664785496][956 ms][DEBUG] check_internet: online [2025-09-07 18:32:20][350547664785496][956 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:32:20][350547664785496][956 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664785496\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1952\"}'\'' -e'"" [2025-09-07 18:32:20][350547664785496][956 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:32:20][350547664785496][956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664785496\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1952\"}'\'' -e'"" [2025-09-07 18:32:24][350547664785496][5907 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e75b84f3-e55b-4e74-9689-aa3997d0b444","id":"QR_e75b84f3-e55b-4e74-9689-aa3997d0b444","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:32:25][350547664785496][6064 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-07 18:32:25][350547664785496][6064 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-07 18:32:25][350547664785496][6064 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:32:29][352743953252151][0 ms][INFO] === Request start === [2025-09-07 18:32:29][352743953252151][1 ms][DEBUG] START check_scloud [2025-09-07 18:32:29][352743953252151][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:32:29][352743953252151][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 3213 25885 24309700 156236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:32:29][352743953252151][307 ms][DEBUG] targetPkg: running [2025-09-07 18:32:29][352743953252151][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 18:32:29][352743953252151][308 ms][DEBUG] START check_boot_completed [2025-09-07 18:32:29][352743953252151][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:32:29][352743953252151][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:32:29][352743953252151][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:32:29][352743953252151][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:32:29][352743953252151][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:32:29][352743953252151][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:32:29][352743953252151][573 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 882\nsuccessfulTxPacketsPerSecond: 2.264550651058312\nretriedTxPackets: 140\nretriedTxPacketsPerSecond: 0.2958525850576182\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 910\nsuccessfulRxPacketsPerSecond: 2.4910057161641435\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:32:29][352743953252151][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:32:30][352743953252151][948 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.482/272.482/272.482/0.000 ms\n [2025-09-07 18:32:30][352743953252151][948 ms][DEBUG] check_internet: online [2025-09-07 18:32:30][352743953252151][948 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:32:30][352743953252151][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953252151\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2865\"}'\'' -e'"" [2025-09-07 18:32:30][352743953252151][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:32:30][352743953252151][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953252151\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2865\"}'\'' -e'"" [2025-09-07 18:32:33][352743953252151][4259 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1be82541-bef3-4358-8082-4469980a0145","id":"QR_1be82541-bef3-4358-8082-4469980a0145","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:32:33][352743953252151][4416 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=3343 [2025-09-07 18:32:33][352743953252151][4416 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-09-07 18:32:33][352743953252151][4416 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:34:03][357674432137108][0 ms][INFO] === Request start === [2025-09-07 18:34:03][357674432137108][1 ms][DEBUG] START check_scloud [2025-09-07 18:34:03][357674432137108][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:34:03][357674432137108][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 3213 25885 24441952 169320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:34:03][357674432137108][311 ms][DEBUG] targetPkg: running [2025-09-07 18:34:03][357674432137108][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 18:34:03][357674432137108][311 ms][DEBUG] START check_boot_completed [2025-09-07 18:34:03][357674432137108][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:34:04][357674432137108][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:34:04][357674432137108][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:34:04][357674432137108][406 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 18:34:04][357674432137108][406 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-07 18:34:04][357674432137108][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:34:04][357674432137108][529 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1358\nsuccessfulTxPacketsPerSecond: 1.581106442344422\nretriedTxPackets: 200\nretriedTxPacketsPerSecond: 0.19929913138795236\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1326\nsuccessfulRxPacketsPerSecond: 1.3818073109564697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:34:04][357674432137108][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:34:04][357674432137108][904 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.304/285.304/285.304/0.000 ms\n [2025-09-07 18:34:04][357674432137108][904 ms][DEBUG] check_internet: online [2025-09-07 18:34:04][357674432137108][904 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:34:04][357674432137108][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674432137108\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4173\"}'\'' -e'"" [2025-09-07 18:34:04][357674432137108][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:34:04][357674432137108][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674432137108\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4173\"}'\'' -e'"" [2025-09-07 18:34:09][357674432137108][5653 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9af6ae1e-2c15-46a6-b7ee-090a006ab760","id":"QR_9af6ae1e-2c15-46a6-b7ee-090a006ab760","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:34:09][357674432137108][5809 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-07 18:34:09][357674432137108][5809 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-07 18:34:09][357674432137108][5809 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:34:11][357674432137108][1 ms][INFO] === Request start === [2025-09-07 18:34:11][357674432137108][1 ms][DEBUG] START check_scloud [2025-09-07 18:34:11][357674432137108][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:34:11][357674432137108][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 3213 25885 24574184 177068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:34:11][357674432137108][263 ms][DEBUG] targetPkg: running [2025-09-07 18:34:11][357674432137108][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-07 18:34:11][357674432137108][263 ms][DEBUG] START check_boot_completed [2025-09-07 18:34:11][357674432137108][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:34:12][357674432137108][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:34:12][357674432137108][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:34:12][357674432137108][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:34:12][357674432137108][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 18:34:12][357674432137108][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:34:12][357674432137108][482 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1358\nsuccessfulTxPacketsPerSecond: 1.581106442344422\nretriedTxPackets: 200\nretriedTxPacketsPerSecond: 0.19929913138795236\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1326\nsuccessfulRxPacketsPerSecond: 1.3818073109564697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:34:12][357674432137108][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:34:12][357674432137108][841 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.692/247.692/247.692/0.000 ms\n [2025-09-07 18:34:12][357674432137108][841 ms][DEBUG] check_internet: online [2025-09-07 18:34:12][357674432137108][841 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:34:12][357674432137108][841 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674432137108\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3905\"}'\'' -e'"" [2025-09-07 18:34:12][357674432137108][841 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:34:12][357674432137108][841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674432137108\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3905\"}'\'' -e'"" [2025-09-07 18:34:18][357674432137108][6621 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c4b6c9a-18b8-4c4b-8188-acc698d3d47f","id":"QR_2c4b6c9a-18b8-4c4b-8188-acc698d3d47f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:34:18][357674432137108][6777 ms][DEBUG] proc_open done in 5935 ms; code=255; res.len=3343 [2025-09-07 18:34:18][357674432137108][6777 ms][DEBUG] END runCmdUntilRes#1 in 5935 ms [2025-09-07 18:34:18][357674432137108][6777 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:36:03][354839121903895][0 ms][INFO] === Request start === [2025-09-07 18:36:03][354839121903895][1 ms][DEBUG] START check_scloud [2025-09-07 18:36:03][354839121903895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:36:03][354839121903895][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 3213 25885 24710376 188840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:36:03][354839121903895][322 ms][DEBUG] targetPkg: running [2025-09-07 18:36:03][354839121903895][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 18:36:03][354839121903895][323 ms][DEBUG] START check_boot_completed [2025-09-07 18:36:03][354839121903895][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:36:03][354839121903895][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:36:03][354839121903895][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:36:03][354839121903895][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:36:03][354839121903895][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:36:03][354839121903895][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:36:04][354839121903895][525 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1358\nsuccessfulTxPacketsPerSecond: 1.581106442344422\nretriedTxPackets: 200\nretriedTxPacketsPerSecond: 0.19929913138795236\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1326\nsuccessfulRxPacketsPerSecond: 1.3818073109564697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:36:04][354839121903895][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:36:04][354839121903895][947 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.489/315.489/315.489/0.000 ms\n [2025-09-07 18:36:04][354839121903895][947 ms][DEBUG] check_internet: online [2025-09-07 18:36:04][354839121903895][947 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:36:04][354839121903895][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354839121903895\",\"model\":\"SM-S908E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9018\"}'\'' -e'"" [2025-09-07 18:36:04][354839121903895][947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:36:04][354839121903895][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354839121903895\",\"model\":\"SM-S908E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9018\"}'\'' -e'"" [2025-09-07 18:36:09][354839121903895][5587 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4399d078-0f9f-4fc7-ac05-12e5b6db0fee","id":"QR_4399d078-0f9f-4fc7-ac05-12e5b6db0fee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:36:09][354839121903895][5743 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-07 18:36:09][354839121903895][5743 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-07 18:36:09][354839121903895][5743 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:36:11][354839121903895][0 ms][INFO] === Request start === [2025-09-07 18:36:11][354839121903895][1 ms][DEBUG] START check_scloud [2025-09-07 18:36:11][354839121903895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:36:11][354839121903895][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 3213 25885 24869232 195668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:36:11][354839121903895][284 ms][DEBUG] targetPkg: running [2025-09-07 18:36:11][354839121903895][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-07 18:36:11][354839121903895][284 ms][DEBUG] START check_boot_completed [2025-09-07 18:36:11][354839121903895][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:36:11][354839121903895][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:36:11][354839121903895][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:36:12][354839121903895][393 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 18:36:12][354839121903895][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:36:12][354839121903895][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:36:12][354839121903895][518 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4617662 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1358\nsuccessfulTxPacketsPerSecond: 1.581106442344422\nretriedTxPackets: 200\nretriedTxPacketsPerSecond: 0.19929913138795236\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1326\nsuccessfulRxPacketsPerSecond: 1.3818073109564697\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:36:12][354839121903895][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:36:12][354839121903895][939 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.723/313.723/313.723/0.000 ms\n [2025-09-07 18:36:12][354839121903895][940 ms][DEBUG] check_internet: online [2025-09-07 18:36:12][354839121903895][940 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:36:12][354839121903895][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354839121903895\",\"model\":\"SM-S908E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1931\"}'\'' -e'"" [2025-09-07 18:36:12][354839121903895][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:36:12][354839121903895][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354839121903895\",\"model\":\"SM-S908E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1931\"}'\'' -e'"" [2025-09-07 18:36:17][354839121903895][5782 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd012c98-976e-4de9-bfd4-ea0505d6324e","id":"QR_bd012c98-976e-4de9-bfd4-ea0505d6324e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:36:17][354839121903895][5938 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-07 18:36:17][354839121903895][5939 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-07 18:36:17][354839121903895][5939 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:37:05][355859831691787][0 ms][INFO] === Request start === [2025-09-07 18:37:05][355859831691787][0 ms][DEBUG] START check_scloud [2025-09-07 18:37:05][355859831691787][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:37:05][355859831691787][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 3213 25885 24962480 207244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:37:05][355859831691787][296 ms][DEBUG] targetPkg: running [2025-09-07 18:37:05][355859831691787][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 18:37:05][355859831691787][296 ms][DEBUG] START check_boot_completed [2025-09-07 18:37:05][355859831691787][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:37:05][355859831691787][341 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 18:37:05][355859831691787][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:37:05][355859831691787][405 ms][DEBUG] SU: done in 64 ms; out [2025-09-07 18:37:05][355859831691787][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:37:05][355859831691787][405 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:37:05][355859831691787][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831691787\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8779\"}'\'' -e'"" [2025-09-07 18:37:05][355859831691787][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:37:05][355859831691787][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831691787\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8779\"}'\'' -e'"" [2025-09-07 18:37:10][355859831691787][4887 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb4a4a56-4623-4ec6-b116-40001b85a1a4","id":"QR_fb4a4a56-4623-4ec6-b116-40001b85a1a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:37:10][355859831691787][5043 ms][DEBUG] proc_open done in 4637 ms; code=255; res.len=3343 [2025-09-07 18:37:10][355859831691787][5043 ms][DEBUG] END runCmdUntilRes#1 in 4638 ms [2025-09-07 18:37:10][355859831691787][5043 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:37:12][355859831691787][0 ms][INFO] === Request start === [2025-09-07 18:37:12][355859831691787][1 ms][DEBUG] START check_scloud [2025-09-07 18:37:12][355859831691787][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:37:13][355859831691787][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 3213 25885 25096892 218336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:37:13][355859831691787][288 ms][DEBUG] targetPkg: running [2025-09-07 18:37:13][355859831691787][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 18:37:13][355859831691787][288 ms][DEBUG] START check_boot_completed [2025-09-07 18:37:13][355859831691787][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:37:13][355859831691787][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:37:13][355859831691787][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:37:13][355859831691787][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 18:37:13][355859831691787][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:37:13][355859831691787][397 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:37:13][355859831691787][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831691787\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7889\"}'\'' -e'"" [2025-09-07 18:37:13][355859831691787][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:37:13][355859831691787][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831691787\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7889\"}'\'' -e'"" [2025-09-07 18:37:21][355859831691787][8754 ms][DEBUG] proc_open done in 8357 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-07 18:37:21][355859831691787][8755 ms][DEBUG] END runCmdUntilRes#1 in 8357 ms [2025-09-07 18:37:21][355859831691787][8755 ms][WARN] Detected error: Process with pid 3213 either refused to load frida-agent, or terminated during injectionProcess with pid 3213 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 18:37:21][355859831691787][8755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 18:37:21][355859831691787][9067 ms][DEBUG] SU: done in 312 ms; out [2025-09-07 18:37:21][355859831691787][9067 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 18:37:22][355859831691787][9535 ms][DEBUG] SU: done in 469 ms; out [2025-09-07 18:37:22][355859831691787][9535 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 18:37:22][355859831691787][9535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 18:37:22][355859831691787][9769 ms][DEBUG] SU: done in 234 ms; out [2025-09-07 18:37:22][355859831691787][9769 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 18:37:22][355859831691787][9926 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 18:37:24][355859831691787][11941 ms][DEBUG] START check_boot_completed [2025-09-07 18:37:24][355859831691787][11941 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:37:24][355859831691787][11988 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:37:24][355859831691787][11988 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:37:24][355859831691787][12034 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:37:24][355859831691787][12035 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 18:37:27][355859831691787][15049 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 18:37:27][355859831691787][15049 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831691787\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7889\"}'\'' -e'"" [2025-09-07 18:37:29][355859831691787][16721 ms][DEBUG] proc_open done in 1672 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 18:37:29][355859831691787][16721 ms][DEBUG] END runCmdUntilRes#2 in 1672 ms [2025-09-07 18:37:29][355859831691787][16721 ms][WARN] Detected error 2; Reboot the device [2025-09-07 18:37:29][355859831691787][16722 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 18:37:29][355859831691787][16987 ms][DEBUG] SU: done in 265 ms; outsystem 6999 6634 7781972 150872 0 0 R system_server\n [2025-09-07 18:37:29][355859831691787][16987 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 18:37:30][355859831691787][17580 ms][DEBUG] SU: done in 593 ms; out [2025-09-07 18:41:03][358453422055029][1 ms][INFO] === Request start === [2025-09-07 18:41:03][358453422055029][1 ms][DEBUG] START check_scloud [2025-09-07 18:41:03][358453422055029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:41:03][358453422055029][358 ms][DEBUG] SU: done in 357 ms; out [2025-09-07 18:41:03][358453422055029][358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 18:41:03][358453422055029][389 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 18:41:03][358453422055029][389 ms][DEBUG] check_devices: device found [2025-09-07 18:41:03][358453422055029][389 ms][WARN] targetPkg: not running, restarting [2025-09-07 18:41:03][358453422055029][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 18:41:04][358453422055029][514 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 18:41:04][358453422055029][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 18:41:04][358453422055029][701 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 18:41:06][358453422055029][2717 ms][DEBUG] END check_scloud in 2715 ms [2025-09-07 18:41:06][358453422055029][2717 ms][DEBUG] START check_boot_completed [2025-09-07 18:41:06][358453422055029][2717 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:41:06][358453422055029][2763 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:41:06][358453422055029][2764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:41:06][358453422055029][2812 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 18:41:06][358453422055029][2812 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-07 18:41:06][358453422055029][2812 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:41:06][358453422055029][2812 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453422055029\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5344\"}'\'' -e'"" [2025-09-07 18:41:06][358453422055029][2812 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:41:06][358453422055029][2813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453422055029\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5344\"}'\'' -e'"" [2025-09-07 18:41:11][358453422055029][7528 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42f7032f-4ad4-4a77-9081-ce77994660a4","id":"QR_42f7032f-4ad4-4a77-9081-ce77994660a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:41:11][358453422055029][7684 ms][DEBUG] proc_open done in 4871 ms; code=255; res.len=3343 [2025-09-07 18:41:11][358453422055029][7684 ms][DEBUG] END runCmdUntilRes#1 in 4872 ms [2025-09-07 18:41:11][358453422055029][7684 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:41:13][358453422055029][0 ms][INFO] === Request start === [2025-09-07 18:41:13][358453422055029][1 ms][DEBUG] START check_scloud [2025-09-07 18:41:13][358453422055029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:41:13][358453422055029][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 15895 4970 24057056 123900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:41:13][358453422055029][329 ms][DEBUG] targetPkg: running [2025-09-07 18:41:13][358453422055029][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-07 18:41:13][358453422055029][329 ms][DEBUG] START check_boot_completed [2025-09-07 18:41:13][358453422055029][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:41:13][358453422055029][376 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:41:13][358453422055029][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:41:13][358453422055029][423 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:41:13][358453422055029][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 18:41:13][358453422055029][423 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:41:13][358453422055029][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453422055029\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9260\"}'\'' -e'"" [2025-09-07 18:41:13][358453422055029][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:41:13][358453422055029][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453422055029\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9260\"}'\'' -e'"" [2025-09-07 18:41:18][358453422055029][5453 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4d0f09b-299e-4498-8106-3e3ca4862aaf","id":"QR_e4d0f09b-299e-4498-8106-3e3ca4862aaf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:41:19][358453422055029][5609 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 18:41:19][358453422055029][5609 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-07 18:41:19][358453422055029][5609 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:52:03][356414819866768][0 ms][INFO] === Request start === [2025-09-07 18:52:03][356414819866768][1 ms][DEBUG] START check_scloud [2025-09-07 18:52:03][356414819866768][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:52:03][356414819866768][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 15895 4970 24084736 138588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:52:03][356414819866768][311 ms][DEBUG] targetPkg: running [2025-09-07 18:52:03][356414819866768][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-07 18:52:03][356414819866768][311 ms][DEBUG] START check_boot_completed [2025-09-07 18:52:03][356414819866768][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:52:03][356414819866768][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:52:03][356414819866768][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:52:03][356414819866768][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:52:03][356414819866768][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:52:03][356414819866768][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:52:03][356414819866768][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1355\nsuccessfulTxPacketsPerSecond: 0.3122601991157057\nretriedTxPackets: 192\nretriedTxPacketsPerSecond: 0.07308217426112261\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1350\nsuccessfulRxPacketsPerSecond: 0.27571911198514437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:52:03][356414819866768][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:52:05][356414819866768][2310 ms][DEBUG] SU: done in 1796 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=403 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 403.180/403.180/403.180/0.000 ms\n [2025-09-07 18:52:05][356414819866768][2311 ms][DEBUG] check_internet: online [2025-09-07 18:52:05][356414819866768][2311 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:52:05][356414819866768][2311 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819866768\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9330\"}'\'' -e'"" [2025-09-07 18:52:05][356414819866768][2311 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:52:05][356414819866768][2311 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819866768\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9330\"}'\'' -e'"" [2025-09-07 18:52:09][356414819866768][6341 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f4f507d-f7f3-4adc-9ccf-e3053a55ce9d","id":"QR_4f4f507d-f7f3-4adc-9ccf-e3053a55ce9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:52:09][356414819866768][6497 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-07 18:52:09][356414819866768][6497 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-07 18:52:09][356414819866768][6497 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:52:11][356414819866768][0 ms][INFO] === Request start === [2025-09-07 18:52:11][356414819866768][1 ms][DEBUG] START check_scloud [2025-09-07 18:52:11][356414819866768][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:52:12][356414819866768][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 15895 4970 24228308 149332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:52:12][356414819866768][320 ms][DEBUG] targetPkg: running [2025-09-07 18:52:12][356414819866768][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-07 18:52:12][356414819866768][320 ms][DEBUG] START check_boot_completed [2025-09-07 18:52:12][356414819866768][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:52:12][356414819866768][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:52:12][356414819866768][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:52:12][356414819866768][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:52:12][356414819866768][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:52:12][356414819866768][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:52:12][356414819866768][538 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1355\nsuccessfulTxPacketsPerSecond: 0.3122601991157057\nretriedTxPackets: 192\nretriedTxPacketsPerSecond: 0.07308217426112261\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1350\nsuccessfulRxPacketsPerSecond: 0.27571911198514437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:52:12][356414819866768][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:52:12][356414819866768][1007 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.334/335.334/335.334/0.000 ms\n [2025-09-07 18:52:12][356414819866768][1007 ms][DEBUG] check_internet: online [2025-09-07 18:52:12][356414819866768][1007 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:52:12][356414819866768][1007 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819866768\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5445\"}'\'' -e'"" [2025-09-07 18:52:12][356414819866768][1007 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:52:12][356414819866768][1008 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819866768\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5445\"}'\'' -e'"" [2025-09-07 18:52:18][356414819866768][6100 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da450bdd-d360-459a-af25-cc31f137c2bc","id":"QR_da450bdd-d360-459a-af25-cc31f137c2bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:52:18][356414819866768][6256 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-07 18:52:18][356414819866768][6256 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-07 18:52:18][356414819866768][6256 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:54:03][352350279962990][0 ms][INFO] === Request start === [2025-09-07 18:54:03][352350279962990][1 ms][DEBUG] START check_scloud [2025-09-07 18:54:03][352350279962990][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:54:04][352350279962990][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 15895 4970 24376012 161428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:54:04][352350279962990][322 ms][DEBUG] targetPkg: running [2025-09-07 18:54:04][352350279962990][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-07 18:54:04][352350279962990][322 ms][DEBUG] START check_boot_completed [2025-09-07 18:54:04][352350279962990][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:54:04][352350279962990][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:54:04][352350279962990][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:54:04][352350279962990][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:54:04][352350279962990][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 18:54:04][352350279962990][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:54:04][352350279962990][525 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.34536808267580565\nretriedTxPackets: 216\nretriedTxPacketsPerSecond: 0.07970032677133976\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1445\nsuccessfulRxPacketsPerSecond: 0.31548046013655323\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:54:04][352350279962990][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:54:04][352350279962990][962 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=337 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 337.994/337.994/337.994/0.000 ms\n [2025-09-07 18:54:04][352350279962990][962 ms][DEBUG] check_internet: online [2025-09-07 18:54:04][352350279962990][962 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:54:04][352350279962990][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279962990\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-09-07 18:54:04][352350279962990][962 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:54:04][352350279962990][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279962990\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-09-07 18:54:09][352350279962990][5695 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_066bc940-49da-4848-8d50-d05ed5f293d5","id":"QR_066bc940-49da-4848-8d50-d05ed5f293d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:54:09][352350279962990][5852 ms][DEBUG] proc_open done in 4890 ms; code=255; res.len=3343 [2025-09-07 18:54:09][352350279962990][5852 ms][DEBUG] END runCmdUntilRes#1 in 4890 ms [2025-09-07 18:54:09][352350279962990][5852 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:54:12][352350279962990][1 ms][INFO] === Request start === [2025-09-07 18:54:12][352350279962990][1 ms][DEBUG] START check_scloud [2025-09-07 18:54:12][352350279962990][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:54:12][352350279962990][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 15895 4970 24515596 172092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:54:12][352350279962990][304 ms][DEBUG] targetPkg: running [2025-09-07 18:54:12][352350279962990][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 18:54:12][352350279962990][304 ms][DEBUG] START check_boot_completed [2025-09-07 18:54:12][352350279962990][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:54:12][352350279962990][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:54:12][352350279962990][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:54:12][352350279962990][399 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 18:54:12][352350279962990][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 18:54:12][352350279962990][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:54:12][352350279962990][507 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.34536808267580565\nretriedTxPackets: 216\nretriedTxPacketsPerSecond: 0.07970032677133976\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1445\nsuccessfulRxPacketsPerSecond: 0.31548046013655323\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:54:12][352350279962990][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:54:13][352350279962990][882 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.689/269.689/269.689/0.000 ms\n [2025-09-07 18:54:13][352350279962990][882 ms][DEBUG] check_internet: online [2025-09-07 18:54:13][352350279962990][882 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:54:13][352350279962990][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279962990\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3050\"}'\'' -e'"" [2025-09-07 18:54:13][352350279962990][882 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:54:13][352350279962990][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279962990\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3050\"}'\'' -e'"" [2025-09-07 18:54:18][352350279962990][6036 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efd95444-a2f9-4250-95f7-ca9dde17529b","id":"QR_efd95444-a2f9-4250-95f7-ca9dde17529b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:54:18][352350279962990][6193 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-07 18:54:18][352350279962990][6193 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 18:54:18][352350279962990][6193 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:58:03][354255812533117][1 ms][INFO] === Request start === [2025-09-07 18:58:03][354255812533117][1 ms][DEBUG] START check_scloud [2025-09-07 18:58:03][354255812533117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:58:03][354255812533117][244 ms][DEBUG] SU: done in 242 ms; outu0_a118 15895 4970 24664268 158780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:58:03][354255812533117][244 ms][DEBUG] targetPkg: running [2025-09-07 18:58:03][354255812533117][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-07 18:58:03][354255812533117][244 ms][DEBUG] START check_boot_completed [2025-09-07 18:58:03][354255812533117][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:58:03][354255812533117][274 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 18:58:03][354255812533117][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:58:04][354255812533117][322 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:58:04][354255812533117][322 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 18:58:04][354255812533117][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:58:04][354255812533117][462 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1534\nsuccessfulTxPacketsPerSecond: 0.5755859464935305\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.1381406271584473\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1513\nsuccessfulRxPacketsPerSecond: 0.5218645914874676\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:58:04][354255812533117][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:58:05][354255812533117][1868 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.470/303.470/303.470/0.000 ms\n [2025-09-07 18:58:05][354255812533117][1868 ms][DEBUG] check_internet: online [2025-09-07 18:58:05][354255812533117][1868 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:58:05][354255812533117][1868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812533117\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-07 18:58:05][354255812533117][1868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:58:05][354255812533117][1868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812533117\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-07 18:58:09][354255812533117][6273 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57007fde-adf3-4dc4-9a7b-03d9434e3086","id":"QR_57007fde-adf3-4dc4-9a7b-03d9434e3086","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:58:10][354255812533117][6429 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-07 18:58:10][354255812533117][6429 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-07 18:58:10][354255812533117][6429 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:58:12][354255812533117][0 ms][INFO] === Request start === [2025-09-07 18:58:12][354255812533117][1 ms][DEBUG] START check_scloud [2025-09-07 18:58:12][354255812533117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:58:12][354255812533117][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 15895 4970 24784340 161896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:58:12][354255812533117][327 ms][DEBUG] targetPkg: running [2025-09-07 18:58:12][354255812533117][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-07 18:58:12][354255812533117][327 ms][DEBUG] START check_boot_completed [2025-09-07 18:58:12][354255812533117][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:58:12][354255812533117][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 18:58:12][354255812533117][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:58:12][354255812533117][421 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 18:58:12][354255812533117][421 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 18:58:12][354255812533117][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:58:12][354255812533117][530 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1534\nsuccessfulTxPacketsPerSecond: 0.5755859464935305\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.1381406271584473\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1513\nsuccessfulRxPacketsPerSecond: 0.5218645914874676\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:58:12][354255812533117][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:58:13][354255812533117][951 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.702/298.702/298.702/0.000 ms\n [2025-09-07 18:58:13][354255812533117][951 ms][DEBUG] check_internet: online [2025-09-07 18:58:13][354255812533117][952 ms][DEBUG] rawBody.length=1160 [2025-09-07 18:58:13][354255812533117][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812533117\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4168\"}'\'' -e'"" [2025-09-07 18:58:13][354255812533117][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:58:13][354255812533117][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812533117\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4168\"}'\'' -e'"" [2025-09-07 18:58:18][354255812533117][5997 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f96a2624-8c16-44d5-b2bc-7cf136214024","id":"QR_f96a2624-8c16-44d5-b2bc-7cf136214024","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:58:18][354255812533117][6153 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 18:58:18][354255812533117][6153 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 18:58:18][354255812533117][6153 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 18:58:26][352589408245252][0 ms][INFO] === Request start === [2025-09-07 18:58:26][352589408245252][1 ms][DEBUG] START check_scloud [2025-09-07 18:58:26][352589408245252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 18:58:27][352589408245252][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 15895 4970 24905912 148640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 18:58:27][352589408245252][317 ms][DEBUG] targetPkg: running [2025-09-07 18:58:27][352589408245252][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 18:58:27][352589408245252][317 ms][DEBUG] START check_boot_completed [2025-09-07 18:58:27][352589408245252][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 18:58:27][352589408245252][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 18:58:27][352589408245252][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 18:58:27][352589408245252][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 18:58:27][352589408245252][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 18:58:27][352589408245252][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 18:58:27][352589408245252][536 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1534\nsuccessfulTxPacketsPerSecond: 0.5755859464935305\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.1381406271584473\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1513\nsuccessfulRxPacketsPerSecond: 0.5218645914874676\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 18:58:27][352589408245252][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 18:58:27][352589408245252][942 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.114/293.114/293.114/0.000 ms\n [2025-09-07 18:58:27][352589408245252][942 ms][DEBUG] check_internet: online [2025-09-07 18:58:27][352589408245252][942 ms][DEBUG] rawBody.length=1150 [2025-09-07 18:58:27][352589408245252][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589408245252\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4447\"}'\'' -e'"" [2025-09-07 18:58:27][352589408245252][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 18:58:27][352589408245252][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589408245252\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4447\"}'\'' -e'"" [2025-09-07 18:58:30][352589408245252][4019 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9118b626-0b54-4a18-aa53-de6ead416140","id":"QR_9118b626-0b54-4a18-aa53-de6ead416140","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 18:58:31][352589408245252][4175 ms][DEBUG] proc_open done in 3233 ms; code=255; res.len=3343 [2025-09-07 18:58:31][352589408245252][4175 ms][DEBUG] END runCmdUntilRes#1 in 3233 ms [2025-09-07 18:58:31][352589408245252][4175 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:00:05][351736901713960][1 ms][INFO] === Request start === [2025-09-07 19:00:05][351736901713960][1 ms][DEBUG] START check_scloud [2025-09-07 19:00:05][351736901713960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:00:05][351736901713960][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 15895 4970 25007480 152216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:00:05][351736901713960][309 ms][DEBUG] targetPkg: running [2025-09-07 19:00:05][351736901713960][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 19:00:05][351736901713960][309 ms][DEBUG] START check_boot_completed [2025-09-07 19:00:05][351736901713960][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:00:05][351736901713960][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:00:05][351736901713960][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:00:05][351736901713960][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:00:05][351736901713960][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 19:00:05][351736901713960][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:00:05][351736901713960][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1534\nsuccessfulTxPacketsPerSecond: 0.5755859464935305\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.1381406271584473\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1513\nsuccessfulRxPacketsPerSecond: 0.5218645914874676\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:00:05][351736901713960][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:00:06][351736901713960][888 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.506/250.506/250.506/0.000 ms\n [2025-09-07 19:00:06][351736901713960][888 ms][DEBUG] check_internet: online [2025-09-07 19:00:06][351736901713960][888 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:00:06][351736901713960][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901713960\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4886\"}'\'' -e'"" [2025-09-07 19:00:06][351736901713960][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:00:06][351736901713960][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901713960\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4886\"}'\'' -e'"" [2025-09-07 19:00:12][351736901713960][6870 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0e38b5f-d3f7-46b8-a8f6-74af00fb73da","id":"QR_c0e38b5f-d3f7-46b8-a8f6-74af00fb73da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:00:12][351736901713960][7026 ms][DEBUG] proc_open done in 6137 ms; code=255; res.len=3343 [2025-09-07 19:00:12][351736901713960][7026 ms][DEBUG] END runCmdUntilRes#1 in 6137 ms [2025-09-07 19:00:12][351736901713960][7026 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:00:15][351736901713960][0 ms][INFO] === Request start === [2025-09-07 19:00:15][351736901713960][1 ms][DEBUG] START check_scloud [2025-09-07 19:00:15][351736901713960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:00:16][351736901713960][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 15895 4970 25131520 142416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:00:16][351736901713960][307 ms][DEBUG] targetPkg: running [2025-09-07 19:00:16][351736901713960][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 19:00:16][351736901713960][307 ms][DEBUG] START check_boot_completed [2025-09-07 19:00:16][351736901713960][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:00:16][351736901713960][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:00:16][351736901713960][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:00:16][351736901713960][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:00:16][351736901713960][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 19:00:16][351736901713960][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:00:16][351736901713960][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1534\nsuccessfulTxPacketsPerSecond: 0.5755859464935305\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.1381406271584473\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1513\nsuccessfulRxPacketsPerSecond: 0.5218645914874676\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:00:16][351736901713960][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:00:16][351736901713960][962 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=345 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 345.340/345.340/345.340/0.000 ms\n [2025-09-07 19:00:16][351736901713960][962 ms][DEBUG] check_internet: online [2025-09-07 19:00:16][351736901713960][963 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:00:16][351736901713960][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901713960\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2595\"}'\'' -e'"" [2025-09-07 19:00:16][351736901713960][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:00:16][351736901713960][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351736901713960\",\"model\":\"SM-A245M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2595\"}'\'' -e'"" [2025-09-07 19:00:20][351736901713960][4961 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dff09a6-a5d5-4df8-99ba-affaa43b0784","id":"QR_7dff09a6-a5d5-4df8-99ba-affaa43b0784","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:00:20][351736901713960][5117 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-09-07 19:00:20][351736901713960][5118 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-07 19:00:20][351736901713960][5118 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:03:04][350603386450701][1 ms][INFO] === Request start === [2025-09-07 19:03:04][350603386450701][1 ms][DEBUG] START check_scloud [2025-09-07 19:03:04][350603386450701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:03:05][350603386450701][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 15895 4970 25249348 153440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:03:05][350603386450701][316 ms][DEBUG] targetPkg: running [2025-09-07 19:03:05][350603386450701][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-07 19:03:05][350603386450701][316 ms][DEBUG] START check_boot_completed [2025-09-07 19:03:05][350603386450701][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:03:05][350603386450701][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:03:05][350603386450701][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:03:05][350603386450701][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:03:05][350603386450701][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 19:03:05][350603386450701][394 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:03:05][350603386450701][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386450701\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5602\"}'\'' -e'"" [2025-09-07 19:03:05][350603386450701][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:03:05][350603386450701][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386450701\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5602\"}'\'' -e'"" [2025-09-07 19:03:09][350603386450701][4628 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 19:03:09][350603386450701][4628 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-07 19:03:09][350603386450701][4628 ms][WARN] Detected error: Process with pid 15895 either refused to load frida-agent, or terminated during injectionProcess with pid 15895 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 19:03:09][350603386450701][4628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 19:03:09][350603386450701][4924 ms][DEBUG] SU: done in 297 ms; outsystem 5392 4970 12929500 242580 ep_poll 0 S system_server\n [2025-09-07 19:03:09][350603386450701][4924 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 19:03:09][350603386450701][5065 ms][DEBUG] SU: done in 141 ms; out [2025-09-07 19:03:09][350603386450701][5065 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 19:03:09][350603386450701][5065 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 19:03:09][350603386450701][5221 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 19:03:09][350603386450701][5221 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 19:03:10][350603386450701][5409 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 19:03:12][350603386450701][7424 ms][DEBUG] START check_boot_completed [2025-09-07 19:03:12][350603386450701][7424 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:03:12][350603386450701][7471 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:03:12][350603386450701][7471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:03:12][350603386450701][7519 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 19:03:12][350603386450701][7519 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 19:03:15][350603386450701][10532 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 19:03:15][350603386450701][10532 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386450701\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5602\"}'\'' -e'"" [2025-09-07 19:03:20][350603386450701][15734 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4145f286-eac4-41de-a335-ec5361bfec68","id":"QR_4145f286-eac4-41de-a335-ec5361bfec68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:03:20][350603386450701][15890 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-07 19:03:20][350603386450701][15890 ms][DEBUG] END runCmdUntilRes#2 in 5358 ms [2025-09-07 19:03:20][350603386450701][15890 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:03:24][350603386450701][0 ms][INFO] === Request start === [2025-09-07 19:03:24][350603386450701][1 ms][DEBUG] START check_scloud [2025-09-07 19:03:24][350603386450701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:03:24][350603386450701][237 ms][DEBUG] SU: done in 236 ms; outu0_a118 18631 4970 23957920 124636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:03:24][350603386450701][237 ms][DEBUG] targetPkg: running [2025-09-07 19:03:24][350603386450701][237 ms][DEBUG] END check_scloud in 237 ms [2025-09-07 19:03:24][350603386450701][237 ms][DEBUG] START check_boot_completed [2025-09-07 19:03:24][350603386450701][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:03:24][350603386450701][283 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 19:03:24][350603386450701][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:03:24][350603386450701][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:03:24][350603386450701][329 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 19:03:24][350603386450701][330 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:03:24][350603386450701][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386450701\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2714\"}'\'' -e'"" [2025-09-07 19:03:24][350603386450701][330 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:03:24][350603386450701][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386450701\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2714\"}'\'' -e'"" [2025-09-07 19:03:28][350603386450701][4204 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_898cd128-eedb-4446-a070-20fdf774b2ac","id":"QR_898cd128-eedb-4446-a070-20fdf774b2ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:03:28][350603386450701][4360 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-07 19:03:28][350603386450701][4360 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-07 19:03:28][350603386450701][4360 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:08:03][351978520980246][1 ms][INFO] === Request start === [2025-09-07 19:08:03][351978520980246][1 ms][DEBUG] START check_scloud [2025-09-07 19:08:03][351978520980246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:08:03][351978520980246][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 18631 4970 23979440 138872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:08:03][351978520980246][269 ms][DEBUG] targetPkg: running [2025-09-07 19:08:03][351978520980246][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 19:08:03][351978520980246][269 ms][DEBUG] START check_boot_completed [2025-09-07 19:08:03][351978520980246][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:08:03][351978520980246][314 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:08:03][351978520980246][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:08:03][351978520980246][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 19:08:03][351978520980246][377 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-07 19:08:03][351978520980246][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:08:04][351978520980246][533 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.01715177606641168\nretriedTxPackets: 338\nretriedTxPacketsPerSecond: 0.02572766409961752\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1847\nsuccessfulRxPacketsPerSecond: 0.01715177606641168\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:08:04][351978520980246][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:08:05][351978520980246][1892 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.451/301.451/301.451/0.000 ms\n [2025-09-07 19:08:05][351978520980246][1892 ms][DEBUG] check_internet: online [2025-09-07 19:08:05][351978520980246][1892 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:08:05][351978520980246][1892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520980246\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9505\"}'\'' -e'"" [2025-09-07 19:08:05][351978520980246][1893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:08:05][351978520980246][1893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520980246\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9505\"}'\'' -e'"" [2025-09-07 19:08:09][351978520980246][5875 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3952078b-099a-41c4-8a12-06b8906e6de0","id":"QR_3952078b-099a-41c4-8a12-06b8906e6de0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:08:09][351978520980246][6032 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-07 19:08:09][351978520980246][6032 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-07 19:08:09][351978520980246][6032 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:08:11][351978520980246][0 ms][INFO] === Request start === [2025-09-07 19:08:11][351978520980246][1 ms][DEBUG] START check_scloud [2025-09-07 19:08:11][351978520980246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:08:12][351978520980246][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 18631 4970 24165944 150484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:08:12][351978520980246][284 ms][DEBUG] targetPkg: running [2025-09-07 19:08:12][351978520980246][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-07 19:08:12][351978520980246][284 ms][DEBUG] START check_boot_completed [2025-09-07 19:08:12][351978520980246][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:08:12][351978520980246][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:08:12][351978520980246][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:08:12][351978520980246][378 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 19:08:12][351978520980246][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 19:08:12][351978520980246][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:08:12][351978520980246][519 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30907 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1934\nsuccessfulTxPacketsPerSecond: 0.01715177606641168\nretriedTxPackets: 338\nretriedTxPacketsPerSecond: 0.02572766409961752\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1847\nsuccessfulRxPacketsPerSecond: 0.01715177606641168\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:08:12][351978520980246][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:08:12][351978520980246][847 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.724/222.724/222.724/0.000 ms\n [2025-09-07 19:08:12][351978520980246][847 ms][DEBUG] check_internet: online [2025-09-07 19:08:12][351978520980246][847 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:08:12][351978520980246][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520980246\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6547\"}'\'' -e'"" [2025-09-07 19:08:12][351978520980246][847 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:08:12][351978520980246][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520980246\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6547\"}'\'' -e'"" [2025-09-07 19:08:17][351978520980246][5986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_399833c9-7b25-4ee6-ab9a-5aea04dc7f57","id":"QR_399833c9-7b25-4ee6-ab9a-5aea04dc7f57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:08:17][351978520980246][6142 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-07 19:08:17][351978520980246][6142 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-07 19:08:17][351978520980246][6142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:13:03][358697430670514][1 ms][INFO] === Request start === [2025-09-07 19:13:03][358697430670514][1 ms][DEBUG] START check_scloud [2025-09-07 19:13:03][358697430670514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:13:04][358697430670514][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 18631 4970 24319572 161380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:13:04][358697430670514][261 ms][DEBUG] targetPkg: running [2025-09-07 19:13:04][358697430670514][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-07 19:13:04][358697430670514][261 ms][DEBUG] START check_boot_completed [2025-09-07 19:13:04][358697430670514][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:13:04][358697430670514][293 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:13:04][358697430670514][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:13:04][358697430670514][341 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 19:13:04][358697430670514][341 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-07 19:13:04][358697430670514][341 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:13:04][358697430670514][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430670514\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6176\"}'\'' -e'"" [2025-09-07 19:13:04][358697430670514][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:13:04][358697430670514][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430670514\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6176\"}'\'' -e'"" [2025-09-07 19:13:09][358697430670514][5791 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ba70b29-3476-4936-9d8e-766029b57d11","id":"QR_4ba70b29-3476-4936-9d8e-766029b57d11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:13:09][358697430670514][5947 ms][DEBUG] proc_open done in 5606 ms; code=255; res.len=3343 [2025-09-07 19:13:09][358697430670514][5947 ms][DEBUG] END runCmdUntilRes#1 in 5606 ms [2025-09-07 19:13:09][358697430670514][5947 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:13:12][358697430670514][0 ms][INFO] === Request start === [2025-09-07 19:13:12][358697430670514][1 ms][DEBUG] START check_scloud [2025-09-07 19:13:12][358697430670514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:13:12][358697430670514][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 18631 4970 24495864 172696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:13:12][358697430670514][318 ms][DEBUG] targetPkg: running [2025-09-07 19:13:12][358697430670514][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 19:13:12][358697430670514][319 ms][DEBUG] START check_boot_completed [2025-09-07 19:13:12][358697430670514][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:13:12][358697430670514][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:13:12][358697430670514][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:13:12][358697430670514][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:13:12][358697430670514][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 19:13:12][358697430670514][412 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:13:12][358697430670514][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430670514\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3200\"}'\'' -e'"" [2025-09-07 19:13:12][358697430670514][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:13:12][358697430670514][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358697430670514\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3200\"}'\'' -e'"" [2025-09-07 19:13:17][358697430670514][4973 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eb41fc8-df67-4d10-bd3f-b91a4503f4fe","id":"QR_0eb41fc8-df67-4d10-bd3f-b91a4503f4fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:13:17][358697430670514][5130 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-07 19:13:17][358697430670514][5130 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-07 19:13:17][358697430670514][5130 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:15:04][350166285229337][1 ms][INFO] === Request start === [2025-09-07 19:15:04][350166285229337][1 ms][DEBUG] START check_scloud [2025-09-07 19:15:04][350166285229337][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:15:04][350166285229337][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 18631 4970 24613816 133056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:15:04][350166285229337][276 ms][DEBUG] targetPkg: running [2025-09-07 19:15:04][350166285229337][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-07 19:15:04][350166285229337][276 ms][DEBUG] START check_boot_completed [2025-09-07 19:15:04][350166285229337][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:15:05][350166285229337][323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:15:05][350166285229337][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:15:05][350166285229337][385 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 19:15:05][350166285229337][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:15:05][350166285229337][385 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:15:05][350166285229337][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350166285229337\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8818\"}'\'' -e'"" [2025-09-07 19:15:05][350166285229337][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:15:05][350166285229337][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350166285229337\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8818\"}'\'' -e'"" [2025-09-07 19:15:10][350166285229337][6118 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fab8c66-a4b9-4134-ae36-7ac0ec4e329f","id":"QR_8fab8c66-a4b9-4134-ae36-7ac0ec4e329f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:15:10][350166285229337][6274 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-09-07 19:15:10][350166285229337][6275 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-09-07 19:15:10][350166285229337][6275 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:15:14][350166285229337][0 ms][INFO] === Request start === [2025-09-07 19:15:14][350166285229337][1 ms][DEBUG] START check_scloud [2025-09-07 19:15:14][350166285229337][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:15:14][350166285229337][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 18631 4970 24768704 141164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:15:14][350166285229337][265 ms][DEBUG] targetPkg: running [2025-09-07 19:15:14][350166285229337][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-07 19:15:14][350166285229337][265 ms][DEBUG] START check_boot_completed [2025-09-07 19:15:14][350166285229337][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:15:14][350166285229337][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:15:14][350166285229337][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:15:14][350166285229337][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 19:15:14][350166285229337][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:15:14][350166285229337][374 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:15:14][350166285229337][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350166285229337\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8904\"}'\'' -e'"" [2025-09-07 19:15:14][350166285229337][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:15:14][350166285229337][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350166285229337\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8904\"}'\'' -e'"" [2025-09-07 19:15:18][350166285229337][4045 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb9172ed-8cee-464c-992c-2ce469230c2a","id":"QR_cb9172ed-8cee-464c-992c-2ce469230c2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:15:18][350166285229337][4201 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-09-07 19:15:18][350166285229337][4201 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-07 19:15:18][350166285229337][4201 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:19:03][358438734843766][1 ms][INFO] === Request start === [2025-09-07 19:19:03][358438734843766][1 ms][DEBUG] START check_scloud [2025-09-07 19:19:03][358438734843766][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:19:03][358438734843766][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 18631 4970 24908672 143848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:19:03][358438734843766][250 ms][DEBUG] targetPkg: running [2025-09-07 19:19:03][358438734843766][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-07 19:19:03][358438734843766][250 ms][DEBUG] START check_boot_completed [2025-09-07 19:19:03][358438734843766][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:19:03][358438734843766][281 ms][DEBUG] ADB: done in 30 ms; out [2025-09-07 19:19:03][358438734843766][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:19:03][358438734843766][328 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:19:03][358438734843766][328 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 19:19:03][358438734843766][328 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:19:03][358438734843766][328 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438734843766\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9682\"}'\'' -e'"" [2025-09-07 19:19:03][358438734843766][328 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:19:03][358438734843766][328 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438734843766\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9682\"}'\'' -e'"" [2025-09-07 19:19:08][358438734843766][4967 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dca98284-cbb6-4054-a7c4-915521778731","id":"QR_dca98284-cbb6-4054-a7c4-915521778731","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:19:08][358438734843766][5123 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-07 19:19:08][358438734843766][5123 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-07 19:19:08][358438734843766][5124 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:19:11][358438734843766][0 ms][INFO] === Request start === [2025-09-07 19:19:11][358438734843766][1 ms][DEBUG] START check_scloud [2025-09-07 19:19:11][358438734843766][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:19:11][358438734843766][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 18631 4970 25079816 152732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:19:11][358438734843766][329 ms][DEBUG] targetPkg: running [2025-09-07 19:19:11][358438734843766][329 ms][DEBUG] END check_scloud in 329 ms [2025-09-07 19:19:11][358438734843766][329 ms][DEBUG] START check_boot_completed [2025-09-07 19:19:11][358438734843766][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:19:11][358438734843766][376 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:19:11][358438734843766][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:19:11][358438734843766][423 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:19:11][358438734843766][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 19:19:11][358438734843766][423 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:19:11][358438734843766][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438734843766\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6603\"}'\'' -e'"" [2025-09-07 19:19:11][358438734843766][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:19:11][358438734843766][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438734843766\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6603\"}'\'' -e'"" [2025-09-07 19:19:16][358438734843766][5359 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59d6239e-7547-414e-b225-3f8954435d40","id":"QR_59d6239e-7547-414e-b225-3f8954435d40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:19:16][358438734843766][5515 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 19:19:16][358438734843766][5515 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 19:19:16][358438734843766][5515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:25:03][350957913979289][1 ms][INFO] === Request start === [2025-09-07 19:25:03][350957913979289][1 ms][DEBUG] START check_scloud [2025-09-07 19:25:03][350957913979289][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:25:04][350957913979289][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18631 4970 25217932 164592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:25:04][350957913979289][317 ms][DEBUG] targetPkg: running [2025-09-07 19:25:04][350957913979289][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-07 19:25:04][350957913979289][317 ms][DEBUG] START check_boot_completed [2025-09-07 19:25:04][350957913979289][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:25:04][350957913979289][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:25:04][350957913979289][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:25:04][350957913979289][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:25:04][350957913979289][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 19:25:04][350957913979289][395 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:25:04][350957913979289][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957913979289\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8401\"}'\'' -e'"" [2025-09-07 19:25:04][350957913979289][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:25:04][350957913979289][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957913979289\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8401\"}'\'' -e'"" [2025-09-07 19:25:08][350957913979289][5066 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d502025d-703d-466e-962f-6984664b4511","id":"QR_d502025d-703d-466e-962f-6984664b4511","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:25:09][350957913979289][5222 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-07 19:25:09][350957913979289][5222 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-07 19:25:09][350957913979289][5222 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:25:11][350957913979289][0 ms][INFO] === Request start === [2025-09-07 19:25:11][350957913979289][1 ms][DEBUG] START check_scloud [2025-09-07 19:25:11][350957913979289][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:25:11][350957913979289][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 18631 4970 25360404 174540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:25:11][350957913979289][286 ms][DEBUG] targetPkg: running [2025-09-07 19:25:11][350957913979289][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-07 19:25:11][350957913979289][286 ms][DEBUG] START check_boot_completed [2025-09-07 19:25:11][350957913979289][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:25:11][350957913979289][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:25:11][350957913979289][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:25:11][350957913979289][380 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 19:25:11][350957913979289][380 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 19:25:11][350957913979289][380 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:25:11][350957913979289][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957913979289\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8323\"}'\'' -e'"" [2025-09-07 19:25:11][350957913979289][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:25:11][350957913979289][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957913979289\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8323\"}'\'' -e'"" [2025-09-07 19:25:20][350957913979289][8955 ms][DEBUG] proc_open done in 8575 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 19:25:20][350957913979289][8955 ms][DEBUG] END runCmdUntilRes#1 in 8575 ms [2025-09-07 19:25:20][350957913979289][8955 ms][WARN] Detected error: Process with pid 18631 either refused to load frida-agent, or terminated during injectionProcess with pid 18631 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 19:25:20][350957913979289][8955 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 19:25:20][350957913979289][9315 ms][DEBUG] SU: done in 359 ms; out [2025-09-07 19:25:20][350957913979289][9315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 19:25:21][350957913979289][9642 ms][DEBUG] SU: done in 328 ms; out [2025-09-07 19:25:21][350957913979289][9642 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 19:25:21][350957913979289][9642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 19:25:21][350957913979289][9908 ms][DEBUG] SU: done in 266 ms; out [2025-09-07 19:25:21][350957913979289][9908 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 19:25:21][350957913979289][10205 ms][DEBUG] SU: done in 297 ms; out [2025-09-07 19:25:23][350957913979289][12220 ms][DEBUG] START check_boot_completed [2025-09-07 19:25:23][350957913979289][12220 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:25:23][350957913979289][12267 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:25:23][350957913979289][12267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:25:23][350957913979289][12329 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 19:25:23][350957913979289][12329 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:25:26][350957913979289][15344 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 19:25:26][350957913979289][15344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957913979289\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8323\"}'\'' -e'"" [2025-09-07 19:25:28][350957913979289][16735 ms][DEBUG] proc_open done in 1390 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-07 19:25:28][350957913979289][16735 ms][DEBUG] END runCmdUntilRes#2 in 1391 ms [2025-09-07 19:25:28][350957913979289][16735 ms][WARN] Detected error 2; Reboot the device [2025-09-07 19:25:28][350957913979289][16735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 19:25:28][350957913979289][17031 ms][DEBUG] SU: done in 296 ms; outsystem 22062 21718 7216260 122048 0 0 R system_server\n [2025-09-07 19:25:28][350957913979289][17032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-07 19:25:29][350957913979289][17641 ms][DEBUG] SU: done in 609 ms; out [2025-09-07 19:36:03][353040471564475][1 ms][INFO] === Request start === [2025-09-07 19:36:03][353040471564475][1 ms][DEBUG] START check_scloud [2025-09-07 19:36:03][353040471564475][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:36:03][353040471564475][311 ms][DEBUG] SU: done in 310 ms; out [2025-09-07 19:36:03][353040471564475][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-07 19:36:03][353040471564475][357 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-07 19:36:03][353040471564475][357 ms][DEBUG] check_devices: device found [2025-09-07 19:36:03][353040471564475][358 ms][WARN] targetPkg: not running, restarting [2025-09-07 19:36:03][353040471564475][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 19:36:03][353040471564475][468 ms][DEBUG] SU: done in 111 ms; out [2025-09-07 19:36:03][353040471564475][468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 19:36:04][353040471564475][654 ms][DEBUG] SU: done in 186 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 19:36:06][353040471564475][2669 ms][DEBUG] END check_scloud in 2668 ms [2025-09-07 19:36:06][353040471564475][2669 ms][DEBUG] START check_boot_completed [2025-09-07 19:36:06][353040471564475][2670 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:36:06][353040471564475][2716 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:36:06][353040471564475][2717 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:36:06][353040471564475][2779 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 19:36:06][353040471564475][2779 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:36:06][353040471564475][2779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:36:06][353040471564475][2872 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 953\nsuccessfulTxPacketsPerSecond: 2.210670314637483\nretriedTxPackets: 155\nretriedTxPacketsPerSecond: 0.2663018695850433\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 946\nsuccessfulRxPacketsPerSecond: 2.444140446876425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:36:06][353040471564475][2873 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:36:07][353040471564475][4544 ms][DEBUG] SU: done in 1672 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.819/302.819/302.819/0.000 ms\n [2025-09-07 19:36:07][353040471564475][4544 ms][DEBUG] check_internet: online [2025-09-07 19:36:07][353040471564475][4544 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:36:07][353040471564475][4545 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353040471564475\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2191\"}'\'' -e'"" [2025-09-07 19:36:07][353040471564475][4545 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:36:07][353040471564475][4545 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353040471564475\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2191\"}'\'' -e'"" [2025-09-07 19:36:12][353040471564475][9168 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ed4e82d-dc85-4f97-8a35-460503ab7688","id":"QR_5ed4e82d-dc85-4f97-8a35-460503ab7688","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:36:12][353040471564475][9324 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-07 19:36:12][353040471564475][9324 ms][DEBUG] END runCmdUntilRes#1 in 4779 ms [2025-09-07 19:36:12][353040471564475][9324 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:36:15][353040471564475][0 ms][INFO] === Request start === [2025-09-07 19:36:15][353040471564475][1 ms][DEBUG] START check_scloud [2025-09-07 19:36:15][353040471564475][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:36:15][353040471564475][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 15888 5020 23807136 124684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:36:15][353040471564475][317 ms][DEBUG] targetPkg: running [2025-09-07 19:36:15][353040471564475][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-07 19:36:15][353040471564475][317 ms][DEBUG] START check_boot_completed [2025-09-07 19:36:15][353040471564475][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:36:15][353040471564475][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:36:15][353040471564475][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:36:15][353040471564475][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:36:15][353040471564475][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 19:36:15][353040471564475][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:36:15][353040471564475][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 953\nsuccessfulTxPacketsPerSecond: 2.210670314637483\nretriedTxPackets: 155\nretriedTxPacketsPerSecond: 0.2663018695850433\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 946\nsuccessfulRxPacketsPerSecond: 2.444140446876425\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:36:15][353040471564475][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:36:15][353040471564475][880 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.768/226.768/226.768/0.000 ms\n [2025-09-07 19:36:15][353040471564475][880 ms][DEBUG] check_internet: online [2025-09-07 19:36:15][353040471564475][880 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:36:15][353040471564475][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353040471564475\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5769\"}'\'' -e'"" [2025-09-07 19:36:15][353040471564475][880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:36:15][353040471564475][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353040471564475\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5769\"}'\'' -e'"" [2025-09-07 19:36:21][353040471564475][6284 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47e92c05-b9bb-4d55-9685-f39c835498c9","id":"QR_47e92c05-b9bb-4d55-9685-f39c835498c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:36:21][353040471564475][6440 ms][DEBUG] proc_open done in 5560 ms; code=255; res.len=3343 [2025-09-07 19:36:21][353040471564475][6440 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-07 19:36:21][353040471564475][6440 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:37:04][351270415921984][1 ms][INFO] === Request start === [2025-09-07 19:37:04][351270415921984][1 ms][DEBUG] START check_scloud [2025-09-07 19:37:04][351270415921984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:37:04][351270415921984][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 15888 5020 23872664 138508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:37:04][351270415921984][301 ms][DEBUG] targetPkg: running [2025-09-07 19:37:04][351270415921984][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 19:37:04][351270415921984][301 ms][DEBUG] START check_boot_completed [2025-09-07 19:37:04][351270415921984][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:37:04][351270415921984][346 ms][DEBUG] ADB: done in 45 ms; out [2025-09-07 19:37:04][351270415921984][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:37:04][351270415921984][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:37:04][351270415921984][393 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-07 19:37:04][351270415921984][393 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:37:04][351270415921984][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415921984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4430\"}'\'' -e'"" [2025-09-07 19:37:04][351270415921984][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:37:04][351270415921984][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415921984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4430\"}'\'' -e'"" [2025-09-07 19:37:08][351270415921984][4001 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c60fa5b-9d39-4859-89a1-c51555122eb1","id":"QR_8c60fa5b-9d39-4859-89a1-c51555122eb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:37:08][351270415921984][4157 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-07 19:37:08][351270415921984][4157 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-07 19:37:08][351270415921984][4157 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:37:10][351270415921984][0 ms][INFO] === Request start === [2025-09-07 19:37:10][351270415921984][1 ms][DEBUG] START check_scloud [2025-09-07 19:37:10][351270415921984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:37:10][351270415921984][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 15888 5020 24017112 149688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:37:10][351270415921984][307 ms][DEBUG] targetPkg: running [2025-09-07 19:37:10][351270415921984][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 19:37:10][351270415921984][307 ms][DEBUG] START check_boot_completed [2025-09-07 19:37:10][351270415921984][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:37:10][351270415921984][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:37:10][351270415921984][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:37:10][351270415921984][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:37:10][351270415921984][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 19:37:10][351270415921984][400 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:37:10][351270415921984][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415921984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5601\"}'\'' -e'"" [2025-09-07 19:37:10][351270415921984][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:37:10][351270415921984][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415921984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5601\"}'\'' -e'"" [2025-09-07 19:37:15][351270415921984][5258 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c72aaae6-e010-4483-9603-5d444e950d7e","id":"QR_c72aaae6-e010-4483-9603-5d444e950d7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:37:15][351270415921984][5414 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-07 19:37:15][351270415921984][5414 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-07 19:37:15][351270415921984][5414 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:43:03][351044510732483][1 ms][INFO] === Request start === [2025-09-07 19:43:03][351044510732483][1 ms][DEBUG] START check_scloud [2025-09-07 19:43:03][351044510732483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:43:04][351044510732483][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 15888 5020 24099084 161288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:43:04][351044510732483][282 ms][DEBUG] targetPkg: running [2025-09-07 19:43:04][351044510732483][283 ms][DEBUG] END check_scloud in 281 ms [2025-09-07 19:43:04][351044510732483][283 ms][DEBUG] START check_boot_completed [2025-09-07 19:43:04][351044510732483][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:43:04][351044510732483][314 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:43:04][351044510732483][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:43:04][351044510732483][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:43:04][351044510732483][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 19:43:04][351044510732483][361 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:43:04][351044510732483][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510732483\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7341\"}'\'' -e'"" [2025-09-07 19:43:04][351044510732483][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:43:04][351044510732483][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510732483\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7341\"}'\'' -e'"" [2025-09-07 19:43:08][351044510732483][4750 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_165864d0-abd1-4a60-9bb1-6f36203f7321","id":"QR_165864d0-abd1-4a60-9bb1-6f36203f7321","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:43:08][351044510732483][4906 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-07 19:43:08][351044510732483][4906 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-07 19:43:08][351044510732483][4906 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:43:11][351044510732483][0 ms][INFO] === Request start === [2025-09-07 19:43:11][351044510732483][1 ms][DEBUG] START check_scloud [2025-09-07 19:43:11][351044510732483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:43:11][351044510732483][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 15888 5020 24260052 165428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:43:11][351044510732483][313 ms][DEBUG] targetPkg: running [2025-09-07 19:43:11][351044510732483][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-07 19:43:11][351044510732483][313 ms][DEBUG] START check_boot_completed [2025-09-07 19:43:11][351044510732483][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:43:11][351044510732483][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:43:11][351044510732483][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:43:11][351044510732483][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:43:11][351044510732483][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 19:43:11][351044510732483][407 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:43:11][351044510732483][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510732483\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8738\"}'\'' -e'"" [2025-09-07 19:43:11][351044510732483][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:43:11][351044510732483][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510732483\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8738\"}'\'' -e'"" [2025-09-07 19:43:16][351044510732483][5562 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa9632d0-b57a-4380-993e-3449c7dfde2e","id":"QR_fa9632d0-b57a-4380-993e-3449c7dfde2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:43:16][351044510732483][5718 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 19:43:16][351044510732483][5718 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 19:43:16][351044510732483][5718 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:48:05][359677733261376][1 ms][INFO] === Request start === [2025-09-07 19:48:05][359677733261376][1 ms][DEBUG] START check_scloud [2025-09-07 19:48:05][359677733261376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:48:05][359677733261376][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 15888 5020 24355476 174188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:48:05][359677733261376][288 ms][DEBUG] targetPkg: running [2025-09-07 19:48:05][359677733261376][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 19:48:05][359677733261376][288 ms][DEBUG] START check_boot_completed [2025-09-07 19:48:05][359677733261376][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:48:05][359677733261376][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:48:05][359677733261376][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:48:05][359677733261376][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:48:05][359677733261376][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 19:48:05][359677733261376][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:48:05][359677733261376][460 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1318\nsuccessfulTxPacketsPerSecond: 0.3501240158897404\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.07526030248097224\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1275\nsuccessfulRxPacketsPerSecond: 0.33049089350339983\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:48:05][359677733261376][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:48:06][359677733261376][1850 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.095/304.095/304.095/0.000 ms\n [2025-09-07 19:48:06][359677733261376][1850 ms][DEBUG] check_internet: online [2025-09-07 19:48:06][359677733261376][1851 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:48:06][359677733261376][1851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359677733261376\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4057\"}'\'' -e'"" [2025-09-07 19:48:06][359677733261376][1851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:48:06][359677733261376][1851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359677733261376\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4057\"}'\'' -e'"" [2025-09-07 19:48:11][359677733261376][6896 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64e4788f-f852-4564-ad66-8cb8f5a849c0","id":"QR_64e4788f-f852-4564-ad66-8cb8f5a849c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:48:12][359677733261376][7052 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 19:48:12][359677733261376][7052 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 19:48:12][359677733261376][7052 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:48:15][359677733261376][0 ms][INFO] === Request start === [2025-09-07 19:48:15][359677733261376][1 ms][DEBUG] START check_scloud [2025-09-07 19:48:15][359677733261376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:48:15][359677733261376][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 15888 5020 24493916 182104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:48:15][359677733261376][298 ms][DEBUG] targetPkg: running [2025-09-07 19:48:15][359677733261376][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 19:48:15][359677733261376][298 ms][DEBUG] START check_boot_completed [2025-09-07 19:48:15][359677733261376][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:48:15][359677733261376][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:48:15][359677733261376][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:48:16][359677733261376][407 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 19:48:16][359677733261376][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:48:16][359677733261376][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:48:16][359677733261376][548 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1318\nsuccessfulTxPacketsPerSecond: 0.3501240158897404\nretriedTxPackets: 242\nretriedTxPacketsPerSecond: 0.07526030248097224\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1275\nsuccessfulRxPacketsPerSecond: 0.33049089350339983\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:48:16][359677733261376][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:48:16][359677733261376][938 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.889/267.889/267.889/0.000 ms\n [2025-09-07 19:48:16][359677733261376][938 ms][DEBUG] check_internet: online [2025-09-07 19:48:16][359677733261376][938 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:48:16][359677733261376][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359677733261376\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9819\"}'\'' -e'"" [2025-09-07 19:48:16][359677733261376][939 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:48:16][359677733261376][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359677733261376\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9819\"}'\'' -e'"" [2025-09-07 19:48:20][359677733261376][4968 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0e54bf3-3166-4698-b4f1-a048981eb5d6","id":"QR_f0e54bf3-3166-4698-b4f1-a048981eb5d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:48:20][359677733261376][5125 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-07 19:48:20][359677733261376][5125 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-07 19:48:20][359677733261376][5125 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:49:04][356984191069645][0 ms][INFO] === Request start === [2025-09-07 19:49:04][356984191069645][1 ms][DEBUG] START check_scloud [2025-09-07 19:49:04][356984191069645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:49:05][356984191069645][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 15888 5020 24632220 182724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:49:05][356984191069645][294 ms][DEBUG] targetPkg: running [2025-09-07 19:49:05][356984191069645][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 19:49:05][356984191069645][294 ms][DEBUG] START check_boot_completed [2025-09-07 19:49:05][356984191069645][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:49:05][356984191069645][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:49:05][356984191069645][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:49:05][356984191069645][403 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 19:49:05][356984191069645][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:49:05][356984191069645][404 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:49:05][356984191069645][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356984191069645\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2961\"}'\'' -e'"" [2025-09-07 19:49:05][356984191069645][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:49:05][356984191069645][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356984191069645\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2961\"}'\'' -e'"" [2025-09-07 19:49:10][356984191069645][5340 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aeb14434-7c83-4bcf-bd7e-18ae67842466","id":"QR_aeb14434-7c83-4bcf-bd7e-18ae67842466","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:49:10][356984191069645][5496 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 19:49:10][356984191069645][5496 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 19:49:10][356984191069645][5496 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:49:14][356984191069645][0 ms][INFO] === Request start === [2025-09-07 19:49:14][356984191069645][1 ms][DEBUG] START check_scloud [2025-09-07 19:49:14][356984191069645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:49:14][356984191069645][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 15888 5020 24778788 193428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:49:14][356984191069645][301 ms][DEBUG] targetPkg: running [2025-09-07 19:49:14][356984191069645][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 19:49:14][356984191069645][301 ms][DEBUG] START check_boot_completed [2025-09-07 19:49:14][356984191069645][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:49:14][356984191069645][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:49:14][356984191069645][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:49:14][356984191069645][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 19:49:14][356984191069645][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:49:14][356984191069645][410 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:49:14][356984191069645][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356984191069645\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3116\"}'\'' -e'"" [2025-09-07 19:49:14][356984191069645][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:49:14][356984191069645][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356984191069645\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3116\"}'\'' -e'"" [2025-09-07 19:49:17][356984191069645][3831 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ca16339-3c46-45e4-ba5b-9a8fc1a0ca87","id":"QR_3ca16339-3c46-45e4-ba5b-9a8fc1a0ca87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:49:18][356984191069645][3987 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-09-07 19:49:18][356984191069645][3987 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-07 19:49:18][356984191069645][3987 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:54:03][353055522286027][1 ms][INFO] === Request start === [2025-09-07 19:54:03][353055522286027][1 ms][DEBUG] START check_scloud [2025-09-07 19:54:03][353055522286027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:54:04][353055522286027][325 ms][DEBUG] SU: done in 323 ms; outu0_a118 15888 5020 24894052 205436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:54:04][353055522286027][325 ms][DEBUG] targetPkg: running [2025-09-07 19:54:04][353055522286027][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-07 19:54:04][353055522286027][325 ms][DEBUG] START check_boot_completed [2025-09-07 19:54:04][353055522286027][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:54:04][353055522286027][356 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 19:54:04][353055522286027][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:54:04][353055522286027][404 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 19:54:04][353055522286027][404 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 19:54:04][353055522286027][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:54:04][353055522286027][528 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.4682394197816211\nretriedTxPackets: 276\nretriedTxPacketsPerSecond: 0.112908796259398\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1402\nsuccessfulRxPacketsPerSecond: 0.42174756249833956\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:54:04][353055522286027][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:54:05][353055522286027][1918 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.890/302.890/302.890/0.000 ms\n [2025-09-07 19:54:05][353055522286027][1918 ms][DEBUG] check_internet: online [2025-09-07 19:54:05][353055522286027][1919 ms][DEBUG] rawBody.length=1150 [2025-09-07 19:54:05][353055522286027][1919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055522286027\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8992\"}'\'' -e'"" [2025-09-07 19:54:05][353055522286027][1919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:54:05][353055522286027][1919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055522286027\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8992\"}'\'' -e'"" [2025-09-07 19:54:09][353055522286027][5745 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_086d1c49-d01b-4d5b-9c91-4454c9bcbd78","id":"QR_086d1c49-d01b-4d5b-9c91-4454c9bcbd78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:54:09][353055522286027][5901 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-07 19:54:09][353055522286027][5902 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-07 19:54:09][353055522286027][5902 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 19:54:12][353055522286027][0 ms][INFO] === Request start === [2025-09-07 19:54:12][353055522286027][1 ms][DEBUG] START check_scloud [2025-09-07 19:54:12][353055522286027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 19:54:12][353055522286027][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 15888 5020 25038704 216248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 19:54:12][353055522286027][308 ms][DEBUG] targetPkg: running [2025-09-07 19:54:12][353055522286027][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 19:54:12][353055522286027][308 ms][DEBUG] START check_boot_completed [2025-09-07 19:54:12][353055522286027][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:54:12][353055522286027][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 19:54:12][353055522286027][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:54:12][353055522286027][417 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 19:54:12][353055522286027][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 19:54:12][353055522286027][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 19:54:12][353055522286027][573 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1459\nsuccessfulTxPacketsPerSecond: 0.4682394197816211\nretriedTxPackets: 276\nretriedTxPacketsPerSecond: 0.112908796259398\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1402\nsuccessfulRxPacketsPerSecond: 0.42174756249833956\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 19:54:12][353055522286027][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 19:54:13][353055522286027][901 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.275/227.275/227.275/0.000 ms\n [2025-09-07 19:54:13][353055522286027][901 ms][DEBUG] check_internet: online [2025-09-07 19:54:13][353055522286027][901 ms][DEBUG] rawBody.length=1160 [2025-09-07 19:54:13][353055522286027][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055522286027\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1676\"}'\'' -e'"" [2025-09-07 19:54:13][353055522286027][901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 19:54:13][353055522286027][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055522286027\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1676\"}'\'' -e'"" [2025-09-07 19:54:17][353055522286027][5166 ms][DEBUG] proc_open done in 4265 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 19:54:17][353055522286027][5166 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-07 19:54:17][353055522286027][5166 ms][WARN] Detected error: Process with pid 15888 either refused to load frida-agent, or terminated during injectionProcess with pid 15888 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 19:54:17][353055522286027][5166 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 19:54:17][353055522286027][5431 ms][DEBUG] SU: done in 265 ms; outsystem 5440 5020 12677692 248760 ep_poll 0 S system_server\n [2025-09-07 19:54:17][353055522286027][5431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 19:54:17][353055522286027][5588 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 19:54:17][353055522286027][5588 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 19:54:17][353055522286027][5588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 19:54:18][353055522286027][5712 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 19:54:18][353055522286027][5713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 19:54:18][353055522286027][5916 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 19:54:20][353055522286027][7931 ms][DEBUG] START check_boot_completed [2025-09-07 19:54:20][353055522286027][7931 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 19:54:20][353055522286027][7978 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 19:54:20][353055522286027][7978 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 19:54:20][353055522286027][8024 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 19:54:20][353055522286027][8024 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 19:54:23][353055522286027][11039 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 19:54:23][353055522286027][11039 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055522286027\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1676\"}'\'' -e'"" [2025-09-07 19:54:28][353055522286027][16069 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbe5f2ec-9598-4b71-ac3b-6330e1fc0a5c","id":"QR_bbe5f2ec-9598-4b71-ac3b-6330e1fc0a5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 19:54:28][353055522286027][16226 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-07 19:54:28][353055522286027][16226 ms][DEBUG] END runCmdUntilRes#2 in 5186 ms [2025-09-07 19:54:28][353055522286027][16226 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:05:04][351007062028006][1 ms][INFO] === Request start === [2025-09-07 20:05:04][351007062028006][1 ms][DEBUG] START check_scloud [2025-09-07 20:05:04][351007062028006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:05:04][351007062028006][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17856 5020 23730872 126500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:05:04][351007062028006][308 ms][DEBUG] targetPkg: running [2025-09-07 20:05:04][351007062028006][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-07 20:05:04][351007062028006][308 ms][DEBUG] START check_boot_completed [2025-09-07 20:05:04][351007062028006][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:05:04][351007062028006][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:05:04][351007062028006][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:05:05][351007062028006][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 20:05:05][351007062028006][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 20:05:05][351007062028006][418 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:05:05][351007062028006][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062028006\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5211\"}'\'' -e'"" [2025-09-07 20:05:05][351007062028006][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:05:05][351007062028006][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062028006\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5211\"}'\'' -e'"" [2025-09-07 20:05:11][351007062028006][6869 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_192c1922-1385-404b-9704-5d09f48ef68b","id":"QR_192c1922-1385-404b-9704-5d09f48ef68b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:05:11][351007062028006][7025 ms][DEBUG] proc_open done in 6607 ms; code=255; res.len=3343 [2025-09-07 20:05:11][351007062028006][7025 ms][DEBUG] END runCmdUntilRes#1 in 6607 ms [2025-09-07 20:05:11][351007062028006][7025 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:05:15][351007062028006][0 ms][INFO] === Request start === [2025-09-07 20:05:15][351007062028006][1 ms][DEBUG] START check_scloud [2025-09-07 20:05:15][351007062028006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:05:15][351007062028006][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 17856 5020 23892364 137764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:05:15][351007062028006][256 ms][DEBUG] targetPkg: running [2025-09-07 20:05:15][351007062028006][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-07 20:05:15][351007062028006][256 ms][DEBUG] START check_boot_completed [2025-09-07 20:05:15][351007062028006][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:05:15][351007062028006][303 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 20:05:15][351007062028006][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:05:15][351007062028006][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:05:15][351007062028006][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 20:05:15][351007062028006][350 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:05:15][351007062028006][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062028006\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3708\"}'\'' -e'"" [2025-09-07 20:05:15][351007062028006][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:05:15][351007062028006][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007062028006\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3708\"}'\'' -e'"" [2025-09-07 20:05:20][351007062028006][5067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52aec03c-8574-4fff-aa4e-fdf169718615","id":"QR_52aec03c-8574-4fff-aa4e-fdf169718615","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:05:20][351007062028006][5224 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-07 20:05:20][351007062028006][5224 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-07 20:05:20][351007062028006][5224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:07:03][352060480728896][0 ms][INFO] === Request start === [2025-09-07 20:07:03][352060480728896][1 ms][DEBUG] START check_scloud [2025-09-07 20:07:03][352060480728896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:07:03][352060480728896][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 17856 5020 24010060 148488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:07:03][352060480728896][301 ms][DEBUG] targetPkg: running [2025-09-07 20:07:03][352060480728896][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-07 20:07:03][352060480728896][301 ms][DEBUG] START check_boot_completed [2025-09-07 20:07:03][352060480728896][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:07:03][352060480728896][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:07:03][352060480728896][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:07:04][352060480728896][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:07:04][352060480728896][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 20:07:04][352060480728896][395 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:07:04][352060480728896][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480728896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2455\"}'\'' -e'"" [2025-09-07 20:07:04][352060480728896][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:07:04][352060480728896][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480728896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2455\"}'\'' -e'"" [2025-09-07 20:07:08][352060480728896][4972 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f6450d0-ed9b-4086-9e8d-6fc649ec4b9b","id":"QR_0f6450d0-ed9b-4086-9e8d-6fc649ec4b9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:07:08][352060480728896][5128 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-07 20:07:08][352060480728896][5128 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-07 20:07:08][352060480728896][5128 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:07:11][352060480728896][1 ms][INFO] === Request start === [2025-09-07 20:07:11][352060480728896][1 ms][DEBUG] START check_scloud [2025-09-07 20:07:11][352060480728896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:07:11][352060480728896][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 17856 5020 24158868 160412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:07:11][352060480728896][287 ms][DEBUG] targetPkg: running [2025-09-07 20:07:11][352060480728896][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-07 20:07:11][352060480728896][287 ms][DEBUG] START check_boot_completed [2025-09-07 20:07:11][352060480728896][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:07:11][352060480728896][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:07:11][352060480728896][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:07:11][352060480728896][396 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 20:07:11][352060480728896][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 20:07:11][352060480728896][396 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:07:11][352060480728896][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480728896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4796\"}'\'' -e'"" [2025-09-07 20:07:11][352060480728896][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:07:11][352060480728896][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480728896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4796\"}'\'' -e'"" [2025-09-07 20:07:18][352060480728896][7660 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09f678ab-301e-422f-81b7-c1874d39114a","id":"QR_09f678ab-301e-422f-81b7-c1874d39114a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:07:19][352060480728896][7816 ms][DEBUG] proc_open done in 7420 ms; code=255; res.len=3343 [2025-09-07 20:07:19][352060480728896][7816 ms][DEBUG] END runCmdUntilRes#1 in 7420 ms [2025-09-07 20:07:19][352060480728896][7817 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:21:03][356019746732429][0 ms][INFO] === Request start === [2025-09-07 20:21:03][356019746732429][0 ms][DEBUG] START check_scloud [2025-09-07 20:21:03][356019746732429][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:21:03][356019746732429][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 17856 5020 24245000 169492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:21:03][356019746732429][293 ms][DEBUG] targetPkg: running [2025-09-07 20:21:03][356019746732429][293 ms][DEBUG] END check_scloud in 293 ms [2025-09-07 20:21:03][356019746732429][293 ms][DEBUG] START check_boot_completed [2025-09-07 20:21:03][356019746732429][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:21:03][356019746732429][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:21:03][356019746732429][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:21:03][356019746732429][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:21:03][356019746732429][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:21:03][356019746732429][371 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:21:03][356019746732429][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746732429\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7934\"}'\'' -e'"" [2025-09-07 20:21:03][356019746732429][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:21:03][356019746732429][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746732429\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7934\"}'\'' -e'"" [2025-09-07 20:21:08][356019746732429][5026 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8d635ae-47f6-4c5c-bef1-d786dc4c1ab8","id":"QR_c8d635ae-47f6-4c5c-bef1-d786dc4c1ab8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:21:08][356019746732429][5183 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-07 20:21:08][356019746732429][5183 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-07 20:21:08][356019746732429][5183 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:21:10][356019746732429][0 ms][INFO] === Request start === [2025-09-07 20:21:10][356019746732429][1 ms][DEBUG] START check_scloud [2025-09-07 20:21:10][356019746732429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:21:10][356019746732429][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 17856 5020 24417372 166768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:21:10][356019746732429][305 ms][DEBUG] targetPkg: running [2025-09-07 20:21:10][356019746732429][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 20:21:10][356019746732429][305 ms][DEBUG] START check_boot_completed [2025-09-07 20:21:10][356019746732429][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:21:10][356019746732429][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:21:10][356019746732429][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:21:11][356019746732429][414 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 20:21:11][356019746732429][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 20:21:11][356019746732429][414 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:21:11][356019746732429][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746732429\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5703\"}'\'' -e'"" [2025-09-07 20:21:11][356019746732429][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:21:11][356019746732429][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019746732429\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5703\"}'\'' -e'"" [2025-09-07 20:21:15][356019746732429][5350 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77204b2a-5696-4bf2-a036-7e1b60ad7b4b","id":"QR_77204b2a-5696-4bf2-a036-7e1b60ad7b4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:21:16][356019746732429][5507 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-07 20:21:16][356019746732429][5507 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-07 20:21:16][356019746732429][5507 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:21:20][358796480077362][1 ms][INFO] === Request start === [2025-09-07 20:21:20][358796480077362][1 ms][DEBUG] START check_scloud [2025-09-07 20:21:20][358796480077362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:21:20][358796480077362][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 17856 5020 24572260 174800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:21:20][358796480077362][298 ms][DEBUG] targetPkg: running [2025-09-07 20:21:20][358796480077362][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-07 20:21:20][358796480077362][299 ms][DEBUG] START check_boot_completed [2025-09-07 20:21:20][358796480077362][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:21:20][358796480077362][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:21:20][358796480077362][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:21:20][358796480077362][393 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 20:21:20][358796480077362][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 20:21:20][358796480077362][393 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:21:20][358796480077362][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358796480077362\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2135\"}'\'' -e'"" [2025-09-07 20:21:20][358796480077362][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:21:20][358796480077362][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358796480077362\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2135\"}'\'' -e'"" [2025-09-07 20:21:24][358796480077362][3954 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ba9f857-320a-4ef2-8770-b868c48f8f8d","id":"QR_4ba9f857-320a-4ef2-8770-b868c48f8f8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:21:24][358796480077362][4110 ms][DEBUG] proc_open done in 3716 ms; code=255; res.len=3343 [2025-09-07 20:21:24][358796480077362][4110 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-09-07 20:21:24][358796480077362][4110 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:21:26][358796480077362][0 ms][INFO] === Request start === [2025-09-07 20:21:26][358796480077362][1 ms][DEBUG] START check_scloud [2025-09-07 20:21:26][358796480077362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:21:26][358796480077362][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 17856 5020 24733256 183220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:21:26][358796480077362][306 ms][DEBUG] targetPkg: running [2025-09-07 20:21:26][358796480077362][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 20:21:26][358796480077362][306 ms][DEBUG] START check_boot_completed [2025-09-07 20:21:26][358796480077362][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:21:27][358796480077362][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 20:21:27][358796480077362][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:21:27][358796480077362][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:21:27][358796480077362][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 20:21:27][358796480077362][401 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:21:27][358796480077362][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358796480077362\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5833\"}'\'' -e'"" [2025-09-07 20:21:27][358796480077362][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:21:27][358796480077362][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358796480077362\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5833\"}'\'' -e'"" [2025-09-07 20:21:31][358796480077362][5071 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb14cd80-acf0-48ee-9f6f-f078fcc380cd","id":"QR_fb14cd80-acf0-48ee-9f6f-f078fcc380cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:21:31][358796480077362][5227 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-07 20:21:31][358796480077362][5227 ms][DEBUG] END runCmdUntilRes#1 in 4826 ms [2025-09-07 20:21:31][358796480077362][5227 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:23:03][351270411459930][0 ms][INFO] === Request start === [2025-09-07 20:23:03][351270411459930][1 ms][DEBUG] START check_scloud [2025-09-07 20:23:03][351270411459930][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:23:03][351270411459930][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 17856 5020 24810084 195660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:23:03][351270411459930][264 ms][DEBUG] targetPkg: running [2025-09-07 20:23:03][351270411459930][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-07 20:23:03][351270411459930][264 ms][DEBUG] START check_boot_completed [2025-09-07 20:23:03][351270411459930][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:23:03][351270411459930][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:23:03][351270411459930][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:23:03][351270411459930][373 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 20:23:03][351270411459930][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 20:23:03][351270411459930][373 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:23:03][351270411459930][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411459930\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2756\"}'\'' -e'"" [2025-09-07 20:23:03][351270411459930][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:23:03][351270411459930][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411459930\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2756\"}'\'' -e'"" [2025-09-07 20:23:08][351270411459930][5075 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1cbe50c-1cdf-4d9c-b954-579260a59617","id":"QR_d1cbe50c-1cdf-4d9c-b954-579260a59617","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:23:08][351270411459930][5231 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-07 20:23:08][351270411459930][5231 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-07 20:23:08][351270411459930][5231 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:23:11][351270411459930][1 ms][INFO] === Request start === [2025-09-07 20:23:11][351270411459930][1 ms][DEBUG] START check_scloud [2025-09-07 20:23:11][351270411459930][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:23:11][351270411459930][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 17856 5020 24960748 206440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:23:11][351270411459930][296 ms][DEBUG] targetPkg: running [2025-09-07 20:23:11][351270411459930][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 20:23:11][351270411459930][296 ms][DEBUG] START check_boot_completed [2025-09-07 20:23:11][351270411459930][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:23:11][351270411459930][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:23:11][351270411459930][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:23:11][351270411459930][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:23:11][351270411459930][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:23:11][351270411459930][374 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:23:11][351270411459930][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411459930\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1605\"}'\'' -e'"" [2025-09-07 20:23:11][351270411459930][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:23:11][351270411459930][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411459930\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1605\"}'\'' -e'"" [2025-09-07 20:23:17][351270411459930][6310 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_684ea5e2-0cb6-4923-9cb6-69da61949283","id":"QR_684ea5e2-0cb6-4923-9cb6-69da61949283","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:23:17][351270411459930][6467 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=3343 [2025-09-07 20:23:17][351270411459930][6467 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-07 20:23:17][351270411459930][6467 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:30:03][351272338854334][1 ms][INFO] === Request start === [2025-09-07 20:30:03][351272338854334][1 ms][DEBUG] START check_scloud [2025-09-07 20:30:03][351272338854334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:30:04][351272338854334][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 17856 5020 25072228 160108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:30:04][351272338854334][319 ms][DEBUG] targetPkg: running [2025-09-07 20:30:04][351272338854334][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-07 20:30:04][351272338854334][319 ms][DEBUG] START check_boot_completed [2025-09-07 20:30:04][351272338854334][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:30:04][351272338854334][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:30:04][351272338854334][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:30:04][351272338854334][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:30:04][351272338854334][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:30:04][351272338854334][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:30:04][351272338854334][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2213\nsuccessfulTxPacketsPerSecond: 0.2179298233469687\nretriedTxPackets: 436\nretriedTxPacketsPerSecond: 0.004214280047011093\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2071\nsuccessfulRxPacketsPerSecond: 0.21488617664634957\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:30:04][351272338854334][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:30:05][351272338854334][1946 ms][DEBUG] SU: done in 1439 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.562/302.562/302.562/0.000 ms\n [2025-09-07 20:30:05][351272338854334][1946 ms][DEBUG] check_internet: online [2025-09-07 20:30:05][351272338854334][1946 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:30:05][351272338854334][1946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338854334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-09-07 20:30:05][351272338854334][1946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:30:05][351272338854334][1946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338854334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-09-07 20:30:10][351272338854334][6490 ms][DEBUG] proc_open done in 4543 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 20:30:10][351272338854334][6490 ms][DEBUG] END runCmdUntilRes#1 in 4544 ms [2025-09-07 20:30:10][351272338854334][6490 ms][WARN] Detected error: Process with pid 17856 either refused to load frida-agent, or terminated during injectionProcess with pid 17856 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 20:30:10][351272338854334][6490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 20:30:10][351272338854334][6740 ms][DEBUG] SU: done in 250 ms; outsystem 5440 5020 12712068 204132 ep_poll 0 S system_server\n [2025-09-07 20:30:10][351272338854334][6740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 20:30:10][351272338854334][6880 ms][DEBUG] SU: done in 140 ms; out [2025-09-07 20:30:10][351272338854334][6880 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 20:30:10][351272338854334][6881 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 20:30:10][351272338854334][7005 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 20:30:10][351272338854334][7005 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 20:30:10][351272338854334][7193 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 20:30:12][351272338854334][9208 ms][DEBUG] START check_boot_completed [2025-09-07 20:30:12][351272338854334][9208 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:30:12][351272338854334][9255 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 20:30:12][351272338854334][9255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:30:13][351272338854334][9317 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 20:30:13][351272338854334][9317 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 20:30:16][351272338854334][12332 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 20:30:16][351272338854334][12332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338854334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-09-07 20:30:20][351272338854334][16331 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56c3d6be-7220-4715-b01c-1551efaa3203","id":"QR_56c3d6be-7220-4715-b01c-1551efaa3203","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:30:20][351272338854334][16487 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-07 20:30:20][351272338854334][16487 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-09-07 20:30:20][351272338854334][16488 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:30:22][351272338854334][0 ms][INFO] === Request start === [2025-09-07 20:30:22][351272338854334][1 ms][DEBUG] START check_scloud [2025-09-07 20:30:22][351272338854334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:30:22][351272338854334][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 21492 5020 23791776 125232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:30:22][351272338854334][249 ms][DEBUG] targetPkg: running [2025-09-07 20:30:22][351272338854334][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-07 20:30:22][351272338854334][249 ms][DEBUG] START check_boot_completed [2025-09-07 20:30:22][351272338854334][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:30:22][351272338854334][280 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:30:22][351272338854334][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:30:22][351272338854334][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:30:22][351272338854334][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:30:22][351272338854334][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:30:22][351272338854334][436 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2213\nsuccessfulTxPacketsPerSecond: 0.2179298233469687\nretriedTxPackets: 436\nretriedTxPacketsPerSecond: 0.004214280047011093\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2071\nsuccessfulRxPacketsPerSecond: 0.21488617664634957\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:30:22][351272338854334][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:30:23][351272338854334][796 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.472/247.472/247.472/0.000 ms\n [2025-09-07 20:30:23][351272338854334][796 ms][DEBUG] check_internet: online [2025-09-07 20:30:23][351272338854334][796 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:30:23][351272338854334][796 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338854334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9319\"}'\'' -e'"" [2025-09-07 20:30:23][351272338854334][796 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:30:23][351272338854334][796 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272338854334\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9319\"}'\'' -e'"" [2025-09-07 20:30:29][351272338854334][7372 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0dae1ad-6512-41db-bea5-57a64efca90a","id":"QR_b0dae1ad-6512-41db-bea5-57a64efca90a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:30:29][351272338854334][7528 ms][DEBUG] proc_open done in 6732 ms; code=255; res.len=3343 [2025-09-07 20:30:29][351272338854334][7528 ms][DEBUG] END runCmdUntilRes#1 in 6732 ms [2025-09-07 20:30:29][351272338854334][7528 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:38:03][353670778584147][1 ms][INFO] === Request start === [2025-09-07 20:38:03][353670778584147][1 ms][DEBUG] START check_scloud [2025-09-07 20:38:03][353670778584147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:38:04][353670778584147][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 21492 5020 23829568 138912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:38:04][353670778584147][297 ms][DEBUG] targetPkg: running [2025-09-07 20:38:04][353670778584147][297 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 20:38:04][353670778584147][297 ms][DEBUG] START check_boot_completed [2025-09-07 20:38:04][353670778584147][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:38:04][353670778584147][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:38:04][353670778584147][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:38:04][353670778584147][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:38:04][353670778584147][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:38:04][353670778584147][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:38:04][353670778584147][468 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2503\nsuccessfulTxPacketsPerSecond: 0.29233937944322635\nretriedTxPackets: 511\nretriedTxPacketsPerSecond: 0.06976280645804266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2336\nsuccessfulRxPacketsPerSecond: 0.27240714902664276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:38:04][353670778584147][468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:38:05][353670778584147][1734 ms][DEBUG] SU: done in 1266 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.761/302.761/302.761/0.000 ms\n [2025-09-07 20:38:05][353670778584147][1734 ms][DEBUG] check_internet: online [2025-09-07 20:38:05][353670778584147][1734 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:38:05][353670778584147][1734 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353670778584147\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DSH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8209\"}'\'' -e'"" [2025-09-07 20:38:05][353670778584147][1734 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:38:05][353670778584147][1734 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353670778584147\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DSH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8209\"}'\'' -e'"" [2025-09-07 20:38:09][353670778584147][5748 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2591b16-93ec-4b96-a860-528f8f5cfe96","id":"QR_f2591b16-93ec-4b96-a860-528f8f5cfe96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:38:09][353670778584147][5905 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-07 20:38:09][353670778584147][5905 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-07 20:38:09][353670778584147][5905 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:38:12][353670778584147][0 ms][INFO] === Request start === [2025-09-07 20:38:12][353670778584147][1 ms][DEBUG] START check_scloud [2025-09-07 20:38:12][353670778584147][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:38:12][353670778584147][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 21492 5020 23985492 150656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:38:12][353670778584147][297 ms][DEBUG] targetPkg: running [2025-09-07 20:38:12][353670778584147][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-07 20:38:12][353670778584147][297 ms][DEBUG] START check_boot_completed [2025-09-07 20:38:12][353670778584147][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:38:12][353670778584147][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 20:38:12][353670778584147][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:38:12][353670778584147][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:38:12][353670778584147][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 20:38:12][353670778584147][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:38:12][353670778584147][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2503\nsuccessfulTxPacketsPerSecond: 0.29233937944322635\nretriedTxPackets: 511\nretriedTxPacketsPerSecond: 0.06976280645804266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2336\nsuccessfulRxPacketsPerSecond: 0.27240714902664276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:38:12][353670778584147][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:38:13][353670778584147][938 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.547/303.547/303.547/0.000 ms\n [2025-09-07 20:38:13][353670778584147][938 ms][DEBUG] check_internet: online [2025-09-07 20:38:13][353670778584147][938 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:38:13][353670778584147][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353670778584147\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DSH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6756\"}'\'' -e'"" [2025-09-07 20:38:13][353670778584147][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:38:13][353670778584147][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353670778584147\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DSH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6756\"}'\'' -e'"" [2025-09-07 20:38:18][353670778584147][5983 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f70eae24-4f76-4462-9e11-a9119d48788f","id":"QR_f70eae24-4f76-4462-9e11-a9119d48788f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:38:18][353670778584147][6139 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 20:38:18][353670778584147][6139 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 20:38:18][353670778584147][6139 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:40:04][356105110153142][1 ms][INFO] === Request start === [2025-09-07 20:40:04][356105110153142][1 ms][DEBUG] START check_scloud [2025-09-07 20:40:04][356105110153142][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:40:05][356105110153142][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21492 5020 24076756 161552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:40:05][356105110153142][305 ms][DEBUG] targetPkg: running [2025-09-07 20:40:05][356105110153142][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 20:40:05][356105110153142][305 ms][DEBUG] START check_boot_completed [2025-09-07 20:40:05][356105110153142][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:40:05][356105110153142][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:40:05][356105110153142][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:40:05][356105110153142][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:40:05][356105110153142][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:40:05][356105110153142][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:40:05][356105110153142][540 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2503\nsuccessfulTxPacketsPerSecond: 0.29233937944322635\nretriedTxPackets: 511\nretriedTxPacketsPerSecond: 0.06976280645804266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2336\nsuccessfulRxPacketsPerSecond: 0.27240714902664276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:40:05][356105110153142][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:40:06][356105110153142][2008 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=404 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 404.594/404.594/404.594/0.000 ms\n [2025-09-07 20:40:06][356105110153142][2008 ms][DEBUG] check_internet: online [2025-09-07 20:40:06][356105110153142][2008 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:40:06][356105110153142][2008 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105110153142\",\"model\":\"SM-N986W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4483\"}'\'' -e'"" [2025-09-07 20:40:06][356105110153142][2008 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:40:06][356105110153142][2008 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105110153142\",\"model\":\"SM-N986W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4483\"}'\'' -e'"" [2025-09-07 20:40:12][356105110153142][7054 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69b04fae-f141-4f3f-9ba3-0e8a16e054ed","id":"QR_69b04fae-f141-4f3f-9ba3-0e8a16e054ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:40:12][356105110153142][7210 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 20:40:12][356105110153142][7210 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 20:40:12][356105110153142][7210 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:40:15][356105110153142][0 ms][INFO] === Request start === [2025-09-07 20:40:15][356105110153142][1 ms][DEBUG] START check_scloud [2025-09-07 20:40:15][356105110153142][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:40:16][356105110153142][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21492 5020 24207068 172352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:40:16][356105110153142][314 ms][DEBUG] targetPkg: running [2025-09-07 20:40:16][356105110153142][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-07 20:40:16][356105110153142][314 ms][DEBUG] START check_boot_completed [2025-09-07 20:40:16][356105110153142][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:40:16][356105110153142][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:40:16][356105110153142][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:40:16][356105110153142][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:40:16][356105110153142][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:40:16][356105110153142][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:40:16][356105110153142][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2503\nsuccessfulTxPacketsPerSecond: 0.29233937944322635\nretriedTxPackets: 511\nretriedTxPacketsPerSecond: 0.06976280645804266\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2336\nsuccessfulRxPacketsPerSecond: 0.27240714902664276\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:40:16][356105110153142][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:40:16][356105110153142][923 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.502/310.502/310.502/0.000 ms\n [2025-09-07 20:40:16][356105110153142][923 ms][DEBUG] check_internet: online [2025-09-07 20:40:16][356105110153142][923 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:40:16][356105110153142][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105110153142\",\"model\":\"SM-N986W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7877\"}'\'' -e'"" [2025-09-07 20:40:16][356105110153142][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:40:16][356105110153142][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105110153142\",\"model\":\"SM-N986W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7877\"}'\'' -e'"" [2025-09-07 20:40:20][356105110153142][5047 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_715219b0-be30-4c4a-9acf-f10deddb048d","id":"QR_715219b0-be30-4c4a-9acf-f10deddb048d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:40:20][356105110153142][5203 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-09-07 20:40:20][356105110153142][5203 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-07 20:40:20][356105110153142][5203 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:44:04][356484630048797][1 ms][INFO] === Request start === [2025-09-07 20:44:04][356484630048797][1 ms][DEBUG] START check_scloud [2025-09-07 20:44:04][356484630048797][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:44:04][356484630048797][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 21492 5020 24344476 184708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:44:04][356484630048797][303 ms][DEBUG] targetPkg: running [2025-09-07 20:44:04][356484630048797][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 20:44:04][356484630048797][303 ms][DEBUG] START check_boot_completed [2025-09-07 20:44:04][356484630048797][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:44:04][356484630048797][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:44:04][356484630048797][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:44:04][356484630048797][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:44:04][356484630048797][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 20:44:04][356484630048797][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:44:05][356484630048797][538 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2656\nsuccessfulTxPacketsPerSecond: 0.5139056831922612\nretriedTxPackets: 547\nretriedTxPacketsPerSecond: 0.12091898428053205\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2477\nsuccessfulRxPacketsPerSecond: 0.4735993550987505\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:44:05][356484630048797][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:44:05][356484630048797][991 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.135/333.135/333.135/0.000 ms\n [2025-09-07 20:44:05][356484630048797][991 ms][DEBUG] check_internet: online [2025-09-07 20:44:05][356484630048797][991 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:44:05][356484630048797][991 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356484630048797\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"USC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6657\"}'\'' -e'"" [2025-09-07 20:44:05][356484630048797][991 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:44:05][356484630048797][991 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356484630048797\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"USC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6657\"}'\'' -e'"" [2025-09-07 20:44:11][356484630048797][7067 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6eeaf9d1-3c73-4ae2-b18f-2ba05638c554","id":"QR_6eeaf9d1-3c73-4ae2-b18f-2ba05638c554","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:44:11][356484630048797][7223 ms][DEBUG] proc_open done in 6232 ms; code=255; res.len=3343 [2025-09-07 20:44:11][356484630048797][7224 ms][DEBUG] END runCmdUntilRes#1 in 6232 ms [2025-09-07 20:44:11][356484630048797][7224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:44:15][356484630048797][0 ms][INFO] === Request start === [2025-09-07 20:44:15][356484630048797][1 ms][DEBUG] START check_scloud [2025-09-07 20:44:15][356484630048797][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:44:15][356484630048797][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 21492 5020 24513636 195476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:44:15][356484630048797][307 ms][DEBUG] targetPkg: running [2025-09-07 20:44:15][356484630048797][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 20:44:15][356484630048797][307 ms][DEBUG] START check_boot_completed [2025-09-07 20:44:15][356484630048797][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:44:15][356484630048797][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:44:15][356484630048797][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:44:15][356484630048797][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:44:15][356484630048797][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 20:44:15][356484630048797][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 20:44:15][356484630048797][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2656\nsuccessfulTxPacketsPerSecond: 0.5139056831922612\nretriedTxPackets: 547\nretriedTxPacketsPerSecond: 0.12091898428053205\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2477\nsuccessfulRxPacketsPerSecond: 0.4735993550987505\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 20:44:15][356484630048797][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 20:44:16][356484630048797][901 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.635/268.635/268.635/0.000 ms\n [2025-09-07 20:44:16][356484630048797][901 ms][DEBUG] check_internet: online [2025-09-07 20:44:16][356484630048797][901 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:44:16][356484630048797][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356484630048797\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"USC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4795\"}'\'' -e'"" [2025-09-07 20:44:16][356484630048797][901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:44:16][356484630048797][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356484630048797\",\"model\":\"SM-S921U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"USC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4795\"}'\'' -e'"" [2025-09-07 20:44:20][356484630048797][4743 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a6b5c45-a0c1-40c9-8e9c-8bb53496850f","id":"QR_5a6b5c45-a0c1-40c9-8e9c-8bb53496850f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:44:20][356484630048797][4899 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-07 20:44:20][356484630048797][4899 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-07 20:44:20][356484630048797][4899 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:55:04][357157880751786][1 ms][INFO] === Request start === [2025-09-07 20:55:04][357157880751786][1 ms][DEBUG] START check_scloud [2025-09-07 20:55:04][357157880751786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:55:05][357157880751786][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21492 5020 24595032 207532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:55:05][357157880751786][306 ms][DEBUG] targetPkg: running [2025-09-07 20:55:05][357157880751786][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 20:55:05][357157880751786][306 ms][DEBUG] START check_boot_completed [2025-09-07 20:55:05][357157880751786][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:55:05][357157880751786][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 20:55:05][357157880751786][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:55:05][357157880751786][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 20:55:05][357157880751786][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 20:55:05][357157880751786][384 ms][DEBUG] rawBody.length=1160 [2025-09-07 20:55:05][357157880751786][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157880751786\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7435\"}'\'' -e'"" [2025-09-07 20:55:05][357157880751786][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:55:05][357157880751786][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157880751786\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7435\"}'\'' -e'"" [2025-09-07 20:55:11][357157880751786][6523 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6102c52-3872-4f53-a142-2d59018706b6","id":"QR_a6102c52-3872-4f53-a142-2d59018706b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:55:11][357157880751786][6679 ms][DEBUG] proc_open done in 6295 ms; code=255; res.len=3343 [2025-09-07 20:55:11][357157880751786][6679 ms][DEBUG] END runCmdUntilRes#1 in 6295 ms [2025-09-07 20:55:11][357157880751786][6679 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 20:55:15][357157880751786][0 ms][INFO] === Request start === [2025-09-07 20:55:15][357157880751786][1 ms][DEBUG] START check_scloud [2025-09-07 20:55:15][357157880751786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 20:55:15][357157880751786][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 21492 5020 24734508 218144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 20:55:15][357157880751786][296 ms][DEBUG] targetPkg: running [2025-09-07 20:55:15][357157880751786][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 20:55:15][357157880751786][296 ms][DEBUG] START check_boot_completed [2025-09-07 20:55:15][357157880751786][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 20:55:15][357157880751786][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 20:55:15][357157880751786][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 20:55:15][357157880751786][392 ms][DEBUG] SU: done in 49 ms; out [2025-09-07 20:55:15][357157880751786][392 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-07 20:55:15][357157880751786][392 ms][DEBUG] rawBody.length=1150 [2025-09-07 20:55:15][357157880751786][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157880751786\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2202\"}'\'' -e'"" [2025-09-07 20:55:15][357157880751786][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 20:55:15][357157880751786][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157880751786\",\"model\":\"SM-A326U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2202\"}'\'' -e'"" [2025-09-07 20:55:19][357157880751786][4139 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6687b107-f645-44bb-8921-941948021a1c","id":"QR_6687b107-f645-44bb-8921-941948021a1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 20:55:19][357157880751786][4295 ms][DEBUG] proc_open done in 3902 ms; code=255; res.len=3343 [2025-09-07 20:55:19][357157880751786][4295 ms][DEBUG] END runCmdUntilRes#1 in 3902 ms [2025-09-07 20:55:19][357157880751786][4295 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:08:05][358822630192891][1 ms][INFO] === Request start === [2025-09-07 21:08:05][358822630192891][1 ms][DEBUG] START check_scloud [2025-09-07 21:08:05][358822630192891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:08:05][358822630192891][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 21492 5020 24878912 218356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:08:05][358822630192891][323 ms][DEBUG] targetPkg: running [2025-09-07 21:08:05][358822630192891][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-07 21:08:05][358822630192891][323 ms][DEBUG] START check_boot_completed [2025-09-07 21:08:05][358822630192891][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:08:05][358822630192891][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 21:08:05][358822630192891][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:08:05][358822630192891][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 21:08:05][358822630192891][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 21:08:05][358822630192891][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 21:08:05][358822630192891][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3301\nsuccessfulTxPacketsPerSecond: 0.1590836780146357\nretriedTxPackets: 631\nretriedTxPacketsPerSecond: 0.03314243291971577\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3187\nsuccessfulRxPacketsPerSecond: 0.1458267048467494\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 21:08:05][358822630192891][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 21:08:07][358822630192891][1947 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.049/304.049/304.049/0.000 ms\n [2025-09-07 21:08:07][358822630192891][1947 ms][DEBUG] check_internet: online [2025-09-07 21:08:07][358822630192891][1947 ms][DEBUG] rawBody.length=1160 [2025-09-07 21:08:07][358822630192891][1947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358822630192891\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5716\"}'\'' -e'"" [2025-09-07 21:08:07][358822630192891][1947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:08:07][358822630192891][1947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358822630192891\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5716\"}'\'' -e'"" [2025-09-07 21:08:12][358822630192891][7524 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ced3cc0-b9ff-4093-b9e6-5504a2a5ffd6","id":"QR_0ced3cc0-b9ff-4093-b9e6-5504a2a5ffd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:08:12][358822630192891][7680 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-09-07 21:08:12][358822630192891][7680 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-07 21:08:12][358822630192891][7681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:08:16][358822630192891][0 ms][INFO] === Request start === [2025-09-07 21:08:16][358822630192891][1 ms][DEBUG] START check_scloud [2025-09-07 21:08:16][358822630192891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:08:16][358822630192891][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 21492 5020 25025804 214412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:08:16][358822630192891][324 ms][DEBUG] targetPkg: running [2025-09-07 21:08:16][358822630192891][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 21:08:16][358822630192891][324 ms][DEBUG] START check_boot_completed [2025-09-07 21:08:16][358822630192891][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:08:16][358822630192891][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 21:08:16][358822630192891][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:08:16][358822630192891][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 21:08:16][358822630192891][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 21:08:16][358822630192891][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 21:08:16][358822630192891][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3301\nsuccessfulTxPacketsPerSecond: 0.1590836780146357\nretriedTxPackets: 631\nretriedTxPacketsPerSecond: 0.03314243291971577\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3187\nsuccessfulRxPacketsPerSecond: 0.1458267048467494\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 21:08:16][358822630192891][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 21:08:17][358822630192891][949 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.031/332.031/332.031/0.000 ms\n [2025-09-07 21:08:17][358822630192891][949 ms][DEBUG] check_internet: online [2025-09-07 21:08:17][358822630192891][949 ms][DEBUG] rawBody.length=1150 [2025-09-07 21:08:17][358822630192891][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358822630192891\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4677\"}'\'' -e'"" [2025-09-07 21:08:17][358822630192891][949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:08:17][358822630192891][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358822630192891\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4677\"}'\'' -e'"" [2025-09-07 21:08:21][358822630192891][4979 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 21:08:21][358822630192891][4979 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-07 21:08:21][358822630192891][4979 ms][WARN] Detected error: Process with pid 21492 either refused to load frida-agent, or terminated during injectionProcess with pid 21492 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 21:08:21][358822630192891][4979 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 21:08:21][358822630192891][5276 ms][DEBUG] SU: done in 296 ms; outsystem 5440 5020 12873324 215648 ep_poll 0 S system_server\n [2025-09-07 21:08:21][358822630192891][5276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 21:08:21][358822630192891][5400 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 21:08:21][358822630192891][5401 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 21:08:21][358822630192891][5401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 21:08:21][358822630192891][5526 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 21:08:21][358822630192891][5526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 21:08:22][358822630192891][5713 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 21:08:24][358822630192891][7728 ms][DEBUG] START check_boot_completed [2025-09-07 21:08:24][358822630192891][7728 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:08:24][358822630192891][7759 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 21:08:24][358822630192891][7759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:08:24][358822630192891][7806 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 21:08:24][358822630192891][7806 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 21:08:27][358822630192891][10821 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 21:08:27][358822630192891][10821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358822630192891\",\"model\":\"SM-G991U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4677\"}'\'' -e'"" [2025-09-07 21:08:30][358822630192891][14523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05fa85eb-c656-4c67-8c66-9074dde54274","id":"QR_05fa85eb-c656-4c67-8c66-9074dde54274","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:08:31][358822630192891][14680 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-07 21:08:31][358822630192891][14680 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-09-07 21:08:31][358822630192891][14680 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:15:03][350013884112714][1 ms][INFO] === Request start === [2025-09-07 21:15:03][350013884112714][1 ms][DEBUG] START check_scloud [2025-09-07 21:15:03][350013884112714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:15:03][350013884112714][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 24364 5020 23682332 127408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:15:03][350013884112714][305 ms][DEBUG] targetPkg: running [2025-09-07 21:15:03][350013884112714][305 ms][DEBUG] END check_scloud in 303 ms [2025-09-07 21:15:03][350013884112714][305 ms][DEBUG] START check_boot_completed [2025-09-07 21:15:03][350013884112714][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:15:03][350013884112714][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 21:15:03][350013884112714][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:15:03][350013884112714][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 21:15:03][350013884112714][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 21:15:03][350013884112714][414 ms][DEBUG] rawBody.length=1150 [2025-09-07 21:15:03][350013884112714][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884112714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1554\"}'\'' -e'"" [2025-09-07 21:15:03][350013884112714][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:15:03][350013884112714][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884112714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1554\"}'\'' -e'"" [2025-09-07 21:15:08][350013884112714][5319 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da469523-1942-45ce-95b1-881692e8df82","id":"QR_da469523-1942-45ce-95b1-881692e8df82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:15:08][350013884112714][5475 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-07 21:15:08][350013884112714][5475 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-07 21:15:08][350013884112714][5475 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:15:11][350013884112714][0 ms][INFO] === Request start === [2025-09-07 21:15:11][350013884112714][1 ms][DEBUG] START check_scloud [2025-09-07 21:15:11][350013884112714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:15:11][350013884112714][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 24364 5020 23871088 138400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:15:11][350013884112714][307 ms][DEBUG] targetPkg: running [2025-09-07 21:15:11][350013884112714][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-07 21:15:11][350013884112714][307 ms][DEBUG] START check_boot_completed [2025-09-07 21:15:11][350013884112714][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:15:11][350013884112714][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 21:15:11][350013884112714][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:15:11][350013884112714][431 ms][DEBUG] SU: done in 78 ms; out [2025-09-07 21:15:11][350013884112714][431 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-07 21:15:11][350013884112714][431 ms][DEBUG] rawBody.length=1160 [2025-09-07 21:15:11][350013884112714][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884112714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4065\"}'\'' -e'"" [2025-09-07 21:15:11][350013884112714][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:15:11][350013884112714][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884112714\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4065\"}'\'' -e'"" [2025-09-07 21:15:16][350013884112714][5430 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e828a13-003f-40a9-8089-b974d3e779df","id":"QR_9e828a13-003f-40a9-8089-b974d3e779df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:15:16][350013884112714][5586 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-07 21:15:16][350013884112714][5586 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-07 21:15:16][350013884112714][5586 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:48:03][350070126024628][1 ms][INFO] === Request start === [2025-09-07 21:48:03][350070126024628][1 ms][DEBUG] START check_scloud [2025-09-07 21:48:03][350070126024628][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:48:03][350070126024628][278 ms][DEBUG] SU: done in 276 ms; outu0_a118 24364 5020 23977756 113796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:48:03][350070126024628][278 ms][DEBUG] targetPkg: running [2025-09-07 21:48:03][350070126024628][278 ms][DEBUG] END check_scloud in 277 ms [2025-09-07 21:48:03][350070126024628][278 ms][DEBUG] START check_boot_completed [2025-09-07 21:48:03][350070126024628][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:48:03][350070126024628][309 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 21:48:03][350070126024628][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:48:03][350070126024628][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 21:48:03][350070126024628][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 21:48:03][350070126024628][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 21:48:03][350070126024628][465 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4016\nsuccessfulTxPacketsPerSecond: 0.029873337050904166\nretriedTxPackets: 753\nretriedTxPacketsPerSecond: 0.023234817706258796\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3870\nsuccessfulRxPacketsPerSecond: 0.029873337050904166\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 21:48:03][350070126024628][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 21:48:05][350070126024628][1981 ms][DEBUG] SU: done in 1515 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.508/302.508/302.508/0.000 ms\n [2025-09-07 21:48:05][350070126024628][1981 ms][DEBUG] check_internet: online [2025-09-07 21:48:05][350070126024628][1981 ms][DEBUG] rawBody.length=1150 [2025-09-07 21:48:05][350070126024628][1981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070126024628\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7655\"}'\'' -e'"" [2025-09-07 21:48:05][350070126024628][1981 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:48:05][350070126024628][1981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070126024628\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7655\"}'\'' -e'"" [2025-09-07 21:48:08][350070126024628][5761 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33615f90-d6fb-48fe-9aed-ff3ded4e2277","id":"QR_33615f90-d6fb-48fe-9aed-ff3ded4e2277","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:48:09][350070126024628][5917 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-07 21:48:09][350070126024628][5917 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-07 21:48:09][350070126024628][5917 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:48:11][350070126024628][0 ms][INFO] === Request start === [2025-09-07 21:48:11][350070126024628][0 ms][DEBUG] START check_scloud [2025-09-07 21:48:11][350070126024628][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:48:11][350070126024628][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 24364 5020 24129648 124916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:48:11][350070126024628][320 ms][DEBUG] targetPkg: running [2025-09-07 21:48:11][350070126024628][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-07 21:48:11][350070126024628][321 ms][DEBUG] START check_boot_completed [2025-09-07 21:48:11][350070126024628][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:48:11][350070126024628][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 21:48:11][350070126024628][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:48:11][350070126024628][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 21:48:11][350070126024628][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 21:48:11][350070126024628][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 21:48:11][350070126024628][539 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4016\nsuccessfulTxPacketsPerSecond: 0.029873337050904166\nretriedTxPackets: 753\nretriedTxPacketsPerSecond: 0.023234817706258796\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3870\nsuccessfulRxPacketsPerSecond: 0.029873337050904166\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 21:48:11][350070126024628][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 21:48:12][350070126024628][961 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.624/268.624/268.624/0.000 ms\n [2025-09-07 21:48:12][350070126024628][961 ms][DEBUG] check_internet: online [2025-09-07 21:48:12][350070126024628][961 ms][DEBUG] rawBody.length=1160 [2025-09-07 21:48:12][350070126024628][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070126024628\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4650\"}'\'' -e'"" [2025-09-07 21:48:12][350070126024628][961 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:48:12][350070126024628][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070126024628\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4650\"}'\'' -e'"" [2025-09-07 21:48:17][350070126024628][6053 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9f2fe3c-ac7f-4535-a7f1-7afecfc233be","id":"QR_b9f2fe3c-ac7f-4535-a7f1-7afecfc233be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:48:17][350070126024628][6209 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-07 21:48:17][350070126024628][6209 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-09-07 21:48:17][350070126024628][6209 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:51:04][354728760405959][1 ms][INFO] === Request start === [2025-09-07 21:51:04][354728760405959][1 ms][DEBUG] START check_scloud [2025-09-07 21:51:04][354728760405959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:51:04][354728760405959][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 24364 5020 24276272 135716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:51:04][354728760405959][309 ms][DEBUG] targetPkg: running [2025-09-07 21:51:04][354728760405959][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 21:51:04][354728760405959][309 ms][DEBUG] START check_boot_completed [2025-09-07 21:51:04][354728760405959][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:51:04][354728760405959][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 21:51:04][354728760405959][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:51:04][354728760405959][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 21:51:04][354728760405959][388 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 21:51:04][354728760405959][388 ms][DEBUG] rawBody.length=1160 [2025-09-07 21:51:04][354728760405959][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354728760405959\",\"model\":\"SM-F741B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1615\"}'\'' -e'"" [2025-09-07 21:51:04][354728760405959][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:51:04][354728760405959][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354728760405959\",\"model\":\"SM-F741B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1615\"}'\'' -e'"" [2025-09-07 21:51:10][354728760405959][6386 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5528dda-134d-42d6-8f8e-784ddf99a673","id":"QR_d5528dda-134d-42d6-8f8e-784ddf99a673","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:51:10][354728760405959][6542 ms][DEBUG] proc_open done in 6153 ms; code=255; res.len=3343 [2025-09-07 21:51:10][354728760405959][6542 ms][DEBUG] END runCmdUntilRes#1 in 6154 ms [2025-09-07 21:51:10][354728760405959][6542 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 21:51:14][354728760405959][0 ms][INFO] === Request start === [2025-09-07 21:51:14][354728760405959][1 ms][DEBUG] START check_scloud [2025-09-07 21:51:14][354728760405959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 21:51:14][354728760405959][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 24364 5020 24447352 147432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 21:51:14][354728760405959][310 ms][DEBUG] targetPkg: running [2025-09-07 21:51:14][354728760405959][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-07 21:51:14][354728760405959][310 ms][DEBUG] START check_boot_completed [2025-09-07 21:51:14][354728760405959][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 21:51:14][354728760405959][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 21:51:14][354728760405959][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 21:51:14][354728760405959][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 21:51:14][354728760405959][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 21:51:14][354728760405959][404 ms][DEBUG] rawBody.length=1150 [2025-09-07 21:51:14][354728760405959][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354728760405959\",\"model\":\"SM-F741B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2162\"}'\'' -e'"" [2025-09-07 21:51:14][354728760405959][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 21:51:14][354728760405959][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354728760405959\",\"model\":\"SM-F741B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2162\"}'\'' -e'"" [2025-09-07 21:51:18][354728760405959][4153 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b210ea4e-a972-484a-9809-a3535d648b63","id":"QR_b210ea4e-a972-484a-9809-a3535d648b63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 21:51:18][354728760405959][4309 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-07 21:51:18][354728760405959][4309 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-07 21:51:18][354728760405959][4309 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:01:03][357299100625554][1 ms][INFO] === Request start === [2025-09-07 22:01:03][357299100625554][1 ms][DEBUG] START check_scloud [2025-09-07 22:01:03][357299100625554][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:01:04][357299100625554][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 24364 5020 24553900 138480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:01:04][357299100625554][329 ms][DEBUG] targetPkg: running [2025-09-07 22:01:04][357299100625554][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-07 22:01:04][357299100625554][329 ms][DEBUG] START check_boot_completed [2025-09-07 22:01:04][357299100625554][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:01:04][357299100625554][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 22:01:04][357299100625554][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:01:04][357299100625554][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:01:04][357299100625554][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 22:01:04][357299100625554][407 ms][DEBUG] rawBody.length=1150 [2025-09-07 22:01:04][357299100625554][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299100625554\",\"model\":\"SM-A705Y\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6932\"}'\'' -e'"" [2025-09-07 22:01:04][357299100625554][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:01:04][357299100625554][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299100625554\",\"model\":\"SM-A705Y\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6932\"}'\'' -e'"" [2025-09-07 22:01:09][357299100625554][5234 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2029634-db0e-47ed-9125-7b12f5a8ef73","id":"QR_f2029634-db0e-47ed-9125-7b12f5a8ef73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:01:09][357299100625554][5390 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-07 22:01:09][357299100625554][5390 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-07 22:01:09][357299100625554][5390 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:01:11][357299100625554][0 ms][INFO] === Request start === [2025-09-07 22:01:11][357299100625554][1 ms][DEBUG] START check_scloud [2025-09-07 22:01:11][357299100625554][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:01:11][357299100625554][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 24364 5020 24750724 138488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:01:11][357299100625554][299 ms][DEBUG] targetPkg: running [2025-09-07 22:01:11][357299100625554][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-07 22:01:11][357299100625554][299 ms][DEBUG] START check_boot_completed [2025-09-07 22:01:11][357299100625554][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:01:12][357299100625554][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 22:01:12][357299100625554][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:01:12][357299100625554][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:01:12][357299100625554][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 22:01:12][357299100625554][392 ms][DEBUG] rawBody.length=1160 [2025-09-07 22:01:12][357299100625554][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299100625554\",\"model\":\"SM-A705Y\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6315\"}'\'' -e'"" [2025-09-07 22:01:12][357299100625554][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:01:12][357299100625554][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357299100625554\",\"model\":\"SM-A705Y\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6315\"}'\'' -e'"" [2025-09-07 22:01:17][357299100625554][5563 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5cbe10d-5e0f-4fe5-ad5a-43901d7f077b","id":"QR_e5cbe10d-5e0f-4fe5-ad5a-43901d7f077b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:01:17][357299100625554][5719 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-07 22:01:17][357299100625554][5719 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-07 22:01:17][357299100625554][5719 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:27:04][358634101301129][1 ms][INFO] === Request start === [2025-09-07 22:27:04][358634101301129][1 ms][DEBUG] START check_scloud [2025-09-07 22:27:04][358634101301129][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:27:04][358634101301129][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24364 5020 24843000 129684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:27:04][358634101301129][304 ms][DEBUG] targetPkg: running [2025-09-07 22:27:04][358634101301129][304 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 22:27:04][358634101301129][304 ms][DEBUG] START check_boot_completed [2025-09-07 22:27:04][358634101301129][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:27:04][358634101301129][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 22:27:04][358634101301129][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:27:04][358634101301129][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:27:04][358634101301129][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 22:27:04][358634101301129][382 ms][DEBUG] rawBody.length=1160 [2025-09-07 22:27:04][358634101301129][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358634101301129\",\"model\":\"SM-A307G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5232\"}'\'' -e'"" [2025-09-07 22:27:04][358634101301129][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:27:04][358634101301129][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358634101301129\",\"model\":\"SM-A307G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5232\"}'\'' -e'"" [2025-09-07 22:27:11][358634101301129][6474 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52889af1-0934-4e3b-8d79-38011469957f","id":"QR_52889af1-0934-4e3b-8d79-38011469957f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:27:11][358634101301129][6630 ms][DEBUG] proc_open done in 6248 ms; code=255; res.len=3343 [2025-09-07 22:27:11][358634101301129][6630 ms][DEBUG] END runCmdUntilRes#1 in 6248 ms [2025-09-07 22:27:11][358634101301129][6630 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:27:14][358634101301129][0 ms][INFO] === Request start === [2025-09-07 22:27:14][358634101301129][1 ms][DEBUG] START check_scloud [2025-09-07 22:27:14][358634101301129][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:27:15][358634101301129][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 24364 5020 25037836 122068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:27:15][358634101301129][310 ms][DEBUG] targetPkg: running [2025-09-07 22:27:15][358634101301129][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-07 22:27:15][358634101301129][310 ms][DEBUG] START check_boot_completed [2025-09-07 22:27:15][358634101301129][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:27:15][358634101301129][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 22:27:15][358634101301129][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:27:15][358634101301129][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:27:15][358634101301129][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 22:27:15][358634101301129][404 ms][DEBUG] rawBody.length=1150 [2025-09-07 22:27:15][358634101301129][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358634101301129\",\"model\":\"SM-A307G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8876\"}'\'' -e'"" [2025-09-07 22:27:15][358634101301129][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:27:15][358634101301129][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358634101301129\",\"model\":\"SM-A307G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8876\"}'\'' -e'"" [2025-09-07 22:27:19][358634101301129][4106 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cac7fbb-40d7-4cac-b724-2c8c0f16d768","id":"QR_4cac7fbb-40d7-4cac-b724-2c8c0f16d768","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:27:19][358634101301129][4262 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-07 22:27:19][358634101301129][4262 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-07 22:27:19][358634101301129][4262 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:29:03][351270411729811][0 ms][INFO] === Request start === [2025-09-07 22:29:03][351270411729811][1 ms][DEBUG] START check_scloud [2025-09-07 22:29:03][351270411729811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:29:04][351270411729811][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 24364 5020 25191628 133136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:29:04][351270411729811][256 ms][DEBUG] targetPkg: running [2025-09-07 22:29:04][351270411729811][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-07 22:29:04][351270411729811][256 ms][DEBUG] START check_boot_completed [2025-09-07 22:29:04][351270411729811][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:29:04][351270411729811][302 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 22:29:04][351270411729811][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:29:04][351270411729811][396 ms][DEBUG] SU: done in 94 ms; out [2025-09-07 22:29:04][351270411729811][396 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-07 22:29:04][351270411729811][396 ms][DEBUG] rawBody.length=1150 [2025-09-07 22:29:04][351270411729811][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411729811\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6097\"}'\'' -e'"" [2025-09-07 22:29:04][351270411729811][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:29:04][351270411729811][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411729811\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6097\"}'\'' -e'"" [2025-09-07 22:29:08][351270411729811][4785 ms][DEBUG] proc_open done in 4389 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 22:29:08][351270411729811][4785 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-07 22:29:08][351270411729811][4785 ms][WARN] Detected error: Process with pid 24364 either refused to load frida-agent, or terminated during injectionProcess with pid 24364 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 22:29:08][351270411729811][4785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 22:29:08][351270411729811][5035 ms][DEBUG] SU: done in 250 ms; outsystem 5440 5020 12669940 177648 ep_poll 0 S system_server\n [2025-09-07 22:29:08][351270411729811][5035 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 22:29:09][351270411729811][5191 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 22:29:09][351270411729811][5192 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 22:29:09][351270411729811][5192 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 22:29:09][351270411729811][5316 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 22:29:09][351270411729811][5317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 22:29:09][351270411729811][5629 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 22:29:11][351270411729811][7644 ms][DEBUG] START check_boot_completed [2025-09-07 22:29:11][351270411729811][7644 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:29:11][351270411729811][7675 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 22:29:11][351270411729811][7675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:29:11][351270411729811][7722 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:29:11][351270411729811][7722 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 22:29:14][351270411729811][10737 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 22:29:14][351270411729811][10737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411729811\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6097\"}'\'' -e'"" [2025-09-07 22:29:18][351270411729811][14580 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2078039f-1c5f-41cf-af55-ded4346cdb81","id":"QR_2078039f-1c5f-41cf-af55-ded4346cdb81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:29:18][351270411729811][14736 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-07 22:29:18][351270411729811][14736 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-09-07 22:29:18][351270411729811][14736 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:29:20][351270411729811][1 ms][INFO] === Request start === [2025-09-07 22:29:20][351270411729811][1 ms][DEBUG] START check_scloud [2025-09-07 22:29:20][351270411729811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:29:21][351270411729811][236 ms][DEBUG] SU: done in 235 ms; outu0_a118 28406 5020 23758368 125588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:29:21][351270411729811][236 ms][DEBUG] targetPkg: running [2025-09-07 22:29:21][351270411729811][236 ms][DEBUG] END check_scloud in 235 ms [2025-09-07 22:29:21][351270411729811][236 ms][DEBUG] START check_boot_completed [2025-09-07 22:29:21][351270411729811][236 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:29:21][351270411729811][283 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 22:29:21][351270411729811][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:29:21][351270411729811][330 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:29:21][351270411729811][330 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 22:29:21][351270411729811][330 ms][DEBUG] rawBody.length=1160 [2025-09-07 22:29:21][351270411729811][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411729811\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5111\"}'\'' -e'"" [2025-09-07 22:29:21][351270411729811][330 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:29:21][351270411729811][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270411729811\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5111\"}'\'' -e'"" [2025-09-07 22:29:25][351270411729811][4875 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffa94e1c-065e-453a-b3cf-b90f4bfea55a","id":"QR_ffa94e1c-065e-453a-b3cf-b90f4bfea55a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:29:25][351270411729811][5032 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-07 22:29:25][351270411729811][5032 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-07 22:29:25][351270411729811][5032 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:35:03][353684145772459][1 ms][INFO] === Request start === [2025-09-07 22:35:03][353684145772459][1 ms][DEBUG] START check_scloud [2025-09-07 22:35:03][353684145772459][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:35:03][353684145772459][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 28406 5020 23834060 139640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:35:03][353684145772459][310 ms][DEBUG] targetPkg: running [2025-09-07 22:35:03][353684145772459][310 ms][DEBUG] END check_scloud in 308 ms [2025-09-07 22:35:03][353684145772459][310 ms][DEBUG] START check_boot_completed [2025-09-07 22:35:03][353684145772459][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:35:03][353684145772459][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 22:35:03][353684145772459][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:35:03][353684145772459][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:35:03][353684145772459][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 22:35:03][353684145772459][388 ms][DEBUG] rawBody.length=1150 [2025-09-07 22:35:03][353684145772459][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145772459\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6841\"}'\'' -e'"" [2025-09-07 22:35:03][353684145772459][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:35:03][353684145772459][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145772459\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6841\"}'\'' -e'"" [2025-09-07 22:35:08][353684145772459][5402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6d0e64f-b4f1-41c8-8720-52f757afced5","id":"QR_c6d0e64f-b4f1-41c8-8720-52f757afced5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:35:09][353684145772459][5558 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-09-07 22:35:09][353684145772459][5558 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-09-07 22:35:09][353684145772459][5558 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:35:11][353684145772459][0 ms][INFO] === Request start === [2025-09-07 22:35:11][353684145772459][1 ms][DEBUG] START check_scloud [2025-09-07 22:35:11][353684145772459][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:35:11][353684145772459][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 28406 5020 23954196 151264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:35:11][353684145772459][305 ms][DEBUG] targetPkg: running [2025-09-07 22:35:11][353684145772459][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-07 22:35:11][353684145772459][305 ms][DEBUG] START check_boot_completed [2025-09-07 22:35:11][353684145772459][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:35:11][353684145772459][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 22:35:11][353684145772459][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:35:11][353684145772459][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:35:11][353684145772459][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-07 22:35:11][353684145772459][384 ms][DEBUG] rawBody.length=1160 [2025-09-07 22:35:11][353684145772459][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145772459\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6994\"}'\'' -e'"" [2025-09-07 22:35:11][353684145772459][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:35:11][353684145772459][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145772459\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6994\"}'\'' -e'"" [2025-09-07 22:35:17][353684145772459][5710 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_291f466c-8af4-4030-8c9a-ea6fe4ccf882","id":"QR_291f466c-8af4-4030-8c9a-ea6fe4ccf882","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:35:17][353684145772459][5866 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-09-07 22:35:17][353684145772459][5866 ms][DEBUG] END runCmdUntilRes#1 in 5482 ms [2025-09-07 22:35:17][353684145772459][5866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:56:03][350804330754871][1 ms][INFO] === Request start === [2025-09-07 22:56:03][350804330754871][1 ms][DEBUG] START check_scloud [2025-09-07 22:56:03][350804330754871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:56:04][350804330754871][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 28406 5020 24060744 147200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:56:04][350804330754871][268 ms][DEBUG] targetPkg: running [2025-09-07 22:56:04][350804330754871][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-07 22:56:04][350804330754871][268 ms][DEBUG] START check_boot_completed [2025-09-07 22:56:04][350804330754871][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:56:04][350804330754871][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 22:56:04][350804330754871][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:56:04][350804330754871][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:56:04][350804330754871][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 22:56:04][350804330754871][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 22:56:04][350804330754871][487 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5144\nsuccessfulTxPacketsPerSecond: 0.7988885029521711\nretriedTxPackets: 1016\nretriedTxPacketsPerSecond: 0.10420284821115952\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5055\nsuccessfulRxPacketsPerSecond: 0.7641542202151189\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 22:56:04][350804330754871][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 22:56:05][350804330754871][1908 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.955/303.955/303.955/0.000 ms\n [2025-09-07 22:56:05][350804330754871][1909 ms][DEBUG] check_internet: online [2025-09-07 22:56:05][350804330754871][1909 ms][DEBUG] rawBody.length=1150 [2025-09-07 22:56:05][350804330754871][1909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804330754871\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4252\"}'\'' -e'"" [2025-09-07 22:56:05][350804330754871][1909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:56:05][350804330754871][1909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804330754871\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4252\"}'\'' -e'"" [2025-09-07 22:56:09][350804330754871][5532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_745cbb15-063d-458e-b2c3-0b1f753d0c25","id":"QR_745cbb15-063d-458e-b2c3-0b1f753d0c25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:56:09][350804330754871][5689 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=3343 [2025-09-07 22:56:09][350804330754871][5689 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-07 22:56:09][350804330754871][5689 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:56:11][350804330754871][0 ms][INFO] === Request start === [2025-09-07 22:56:11][350804330754871][1 ms][DEBUG] START check_scloud [2025-09-07 22:56:11][350804330754871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:56:12][350804330754871][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 28406 5020 24204444 152152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:56:12][350804330754871][287 ms][DEBUG] targetPkg: running [2025-09-07 22:56:12][350804330754871][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 22:56:12][350804330754871][288 ms][DEBUG] START check_boot_completed [2025-09-07 22:56:12][350804330754871][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:56:12][350804330754871][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 22:56:12][350804330754871][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:56:12][350804330754871][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 22:56:12][350804330754871][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 22:56:12][350804330754871][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 22:56:12][350804330754871][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5144\nsuccessfulTxPacketsPerSecond: 0.7988885029521711\nretriedTxPackets: 1016\nretriedTxPacketsPerSecond: 0.10420284821115952\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5055\nsuccessfulRxPacketsPerSecond: 0.7641542202151189\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 22:56:12][350804330754871][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 22:56:12][350804330754871][881 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.830/255.830/255.830/0.000 ms\n [2025-09-07 22:56:12][350804330754871][881 ms][DEBUG] check_internet: online [2025-09-07 22:56:12][350804330754871][881 ms][DEBUG] rawBody.length=1160 [2025-09-07 22:56:12][350804330754871][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804330754871\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1959\"}'\'' -e'"" [2025-09-07 22:56:12][350804330754871][881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:56:12][350804330754871][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804330754871\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1959\"}'\'' -e'"" [2025-09-07 22:56:17][350804330754871][6036 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f37ae30-9146-43a5-b92c-f065ec80473f","id":"QR_0f37ae30-9146-43a5-b92c-f065ec80473f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:56:18][350804330754871][6192 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-07 22:56:18][350804330754871][6192 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-07 22:56:18][350804330754871][6192 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 22:56:23][357111201305939][0 ms][INFO] === Request start === [2025-09-07 22:56:23][357111201305939][1 ms][DEBUG] START check_scloud [2025-09-07 22:56:23][357111201305939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 22:56:23][357111201305939][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 28406 5020 24328484 154604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 22:56:23][357111201305939][302 ms][DEBUG] targetPkg: running [2025-09-07 22:56:23][357111201305939][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-07 22:56:23][357111201305939][303 ms][DEBUG] START check_boot_completed [2025-09-07 22:56:23][357111201305939][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 22:56:23][357111201305939][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 22:56:23][357111201305939][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 22:56:23][357111201305939][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 22:56:23][357111201305939][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-07 22:56:23][357111201305939][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 22:56:23][357111201305939][507 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5144\nsuccessfulTxPacketsPerSecond: 0.7988885029521711\nretriedTxPackets: 1016\nretriedTxPacketsPerSecond: 0.10420284821115952\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5055\nsuccessfulRxPacketsPerSecond: 0.7641542202151189\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 22:56:23][357111201305939][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 22:56:24][357111201305939][943 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.604/330.604/330.604/0.000 ms\n [2025-09-07 22:56:24][357111201305939][943 ms][DEBUG] check_internet: online [2025-09-07 22:56:24][357111201305939][943 ms][DEBUG] rawBody.length=1160 [2025-09-07 22:56:24][357111201305939][943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357111201305939\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7857\"}'\'' -e'"" [2025-09-07 22:56:24][357111201305939][943 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 22:56:24][357111201305939][943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357111201305939\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7857\"}'\'' -e'"" [2025-09-07 22:56:29][357111201305939][5801 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7dbbfc9-9acf-4b1c-bdef-30dd78e063a9","id":"QR_a7dbbfc9-9acf-4b1c-bdef-30dd78e063a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 22:56:29][357111201305939][5957 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-07 22:56:29][357111201305939][5957 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-07 22:56:29][357111201305939][5957 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:22:05][354273443158105][1 ms][INFO] === Request start === [2025-09-07 23:22:05][354273443158105][1 ms][DEBUG] START check_scloud [2025-09-07 23:22:05][354273443158105][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:22:05][354273443158105][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 28406 5020 24396148 147204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:22:05][354273443158105][305 ms][DEBUG] targetPkg: running [2025-09-07 23:22:05][354273443158105][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-07 23:22:05][354273443158105][305 ms][DEBUG] START check_boot_completed [2025-09-07 23:22:05][354273443158105][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:22:05][354273443158105][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 23:22:05][354273443158105][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:22:05][354273443158105][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-07 23:22:05][354273443158105][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-07 23:22:05][354273443158105][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 23:22:05][354273443158105][539 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5485\nsuccessfulTxPacketsPerSecond: 0.0199327601557413\nretriedTxPackets: 1102\nretriedTxPacketsPerSecond: 0.0199327601557413\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5362\nsuccessfulRxPacketsPerSecond: 0.0199327601557413\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 23:22:05][354273443158105][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 23:22:07][354273443158105][1993 ms][DEBUG] SU: done in 1453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.110/302.110/302.110/0.000 ms\n [2025-09-07 23:22:07][354273443158105][1993 ms][DEBUG] check_internet: online [2025-09-07 23:22:07][354273443158105][1993 ms][DEBUG] rawBody.length=1160 [2025-09-07 23:22:07][354273443158105][1993 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354273443158105\",\"model\":\"SM-F966U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7758\"}'\'' -e'"" [2025-09-07 23:22:07][354273443158105][1993 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:22:07][354273443158105][1993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354273443158105\",\"model\":\"SM-F966U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7758\"}'\'' -e'"" [2025-09-07 23:22:12][354273443158105][7038 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08512fad-01fc-4089-9ff9-35e49c128efc","id":"QR_08512fad-01fc-4089-9ff9-35e49c128efc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:22:12][354273443158105][7194 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-07 23:22:12][354273443158105][7194 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-07 23:22:12][354273443158105][7194 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:23:04][353158262715559][0 ms][INFO] === Request start === [2025-09-07 23:23:04][353158262715559][1 ms][DEBUG] START check_scloud [2025-09-07 23:23:04][353158262715559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:23:04][353158262715559][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 28406 5020 24548004 152448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:23:04][353158262715559][295 ms][DEBUG] targetPkg: running [2025-09-07 23:23:04][353158262715559][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-07 23:23:04][353158262715559][295 ms][DEBUG] START check_boot_completed [2025-09-07 23:23:04][353158262715559][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:23:04][353158262715559][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 23:23:04][353158262715559][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:23:04][353158262715559][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 23:23:04][353158262715559][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 23:23:04][353158262715559][373 ms][DEBUG] rawBody.length=1160 [2025-09-07 23:23:04][353158262715559][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353158262715559\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1772\"}'\'' -e'"" [2025-09-07 23:23:04][353158262715559][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:23:04][353158262715559][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353158262715559\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1772\"}'\'' -e'"" [2025-09-07 23:23:09][353158262715559][5075 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cc7bb03-0efe-436c-99f8-7d0f6441c9d0","id":"QR_6cc7bb03-0efe-436c-99f8-7d0f6441c9d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:23:09][353158262715559][5231 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-07 23:23:09][353158262715559][5231 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-07 23:23:09][353158262715559][5231 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:23:12][353158262715559][0 ms][INFO] === Request start === [2025-09-07 23:23:12][353158262715559][1 ms][DEBUG] START check_scloud [2025-09-07 23:23:12][353158262715559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:23:13][353158262715559][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 28406 5020 24698796 162600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:23:13][353158262715559][324 ms][DEBUG] targetPkg: running [2025-09-07 23:23:13][353158262715559][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-07 23:23:13][353158262715559][324 ms][DEBUG] START check_boot_completed [2025-09-07 23:23:13][353158262715559][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:23:13][353158262715559][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 23:23:13][353158262715559][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:23:13][353158262715559][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 23:23:13][353158262715559][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 23:23:13][353158262715559][433 ms][DEBUG] rawBody.length=1150 [2025-09-07 23:23:13][353158262715559][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353158262715559\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6673\"}'\'' -e'"" [2025-09-07 23:23:13][353158262715559][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:23:13][353158262715559][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353158262715559\",\"model\":\"SM-G996U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6673\"}'\'' -e'"" [2025-09-07 23:23:18][353158262715559][5228 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8a10d8e-2b03-436e-a13f-21bffe54bfd9","id":"QR_f8a10d8e-2b03-436e-a13f-21bffe54bfd9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:23:18][353158262715559][5385 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-09-07 23:23:18][353158262715559][5385 ms][DEBUG] END runCmdUntilRes#1 in 4951 ms [2025-09-07 23:23:18][353158262715559][5385 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:24:04][357800559235074][0 ms][INFO] === Request start === [2025-09-07 23:24:04][357800559235074][1 ms][DEBUG] START check_scloud [2025-09-07 23:24:04][357800559235074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:24:05][357800559235074][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 28406 5020 24794028 174604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:24:05][357800559235074][301 ms][DEBUG] targetPkg: running [2025-09-07 23:24:05][357800559235074][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-07 23:24:05][357800559235074][301 ms][DEBUG] START check_boot_completed [2025-09-07 23:24:05][357800559235074][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:24:05][357800559235074][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 23:24:05][357800559235074][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:24:05][357800559235074][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 23:24:05][357800559235074][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 23:24:05][357800559235074][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 23:24:05][357800559235074][488 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5485\nsuccessfulTxPacketsPerSecond: 0.0199327601557413\nretriedTxPackets: 1102\nretriedTxPacketsPerSecond: 0.0199327601557413\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5362\nsuccessfulRxPacketsPerSecond: 0.0199327601557413\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 23:24:05][357800559235074][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 23:24:05][357800559235074][879 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.244/257.244/257.244/0.000 ms\n [2025-09-07 23:24:05][357800559235074][879 ms][DEBUG] check_internet: online [2025-09-07 23:24:05][357800559235074][879 ms][DEBUG] rawBody.length=1160 [2025-09-07 23:24:05][357800559235074][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800559235074\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-07 23:24:05][357800559235074][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:24:05][357800559235074][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800559235074\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-07 23:24:11][357800559235074][6659 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a4394a7-b607-411f-8d81-597936cdbada","id":"QR_5a4394a7-b607-411f-8d81-597936cdbada","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:24:11][357800559235074][6815 ms][DEBUG] proc_open done in 5935 ms; code=255; res.len=3343 [2025-09-07 23:24:11][357800559235074][6815 ms][DEBUG] END runCmdUntilRes#1 in 5936 ms [2025-09-07 23:24:11][357800559235074][6815 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:24:15][357800559235074][1 ms][INFO] === Request start === [2025-09-07 23:24:15][357800559235074][1 ms][DEBUG] START check_scloud [2025-09-07 23:24:15][357800559235074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:24:15][357800559235074][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 28406 5020 24956984 183248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:24:15][357800559235074][296 ms][DEBUG] targetPkg: running [2025-09-07 23:24:15][357800559235074][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-07 23:24:15][357800559235074][296 ms][DEBUG] START check_boot_completed [2025-09-07 23:24:15][357800559235074][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:24:15][357800559235074][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 23:24:15][357800559235074][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:24:15][357800559235074][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 23:24:15][357800559235074][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 23:24:15][357800559235074][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-07 23:24:15][357800559235074][530 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30688 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5579\nsuccessfulTxPacketsPerSecond: 0.32890478206559204\nretriedTxPackets: 1132\nretriedTxPacketsPerSecond: 0.10496961129752937\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5443\nsuccessfulRxPacketsPerSecond: 0.2834179505033293\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -43, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -43 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-07 23:24:15][357800559235074][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-07 23:24:16][357800559235074][998 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.998/326.998/326.998/0.000 ms\n [2025-09-07 23:24:16][357800559235074][998 ms][DEBUG] check_internet: online [2025-09-07 23:24:16][357800559235074][998 ms][DEBUG] rawBody.length=1150 [2025-09-07 23:24:16][357800559235074][998 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800559235074\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4250\"}'\'' -e'"" [2025-09-07 23:24:16][357800559235074][999 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:24:16][357800559235074][999 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800559235074\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4250\"}'\'' -e'"" [2025-09-07 23:24:20][357800559235074][5309 ms][DEBUG] proc_open done in 4311 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-07 23:24:20][357800559235074][5309 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-07 23:24:20][357800559235074][5310 ms][WARN] Detected error: Process with pid 28406 either refused to load frida-agent, or terminated during injectionProcess with pid 28406 either refused to load frida-agent, or terminated during injection\r\n [2025-09-07 23:24:20][357800559235074][5310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-07 23:24:20][357800559235074][5591 ms][DEBUG] SU: done in 281 ms; outsystem 5440 5020 12947512 195340 ep_poll 0 S system_server\n [2025-09-07 23:24:20][357800559235074][5591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-07 23:24:20][357800559235074][5716 ms][DEBUG] SU: done in 125 ms; out [2025-09-07 23:24:20][357800559235074][5716 ms][WARN] targetPkg: not running, restarting 2 [2025-09-07 23:24:20][357800559235074][5716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-07 23:24:21][357800559235074][5872 ms][DEBUG] SU: done in 156 ms; out [2025-09-07 23:24:21][357800559235074][5872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-07 23:24:21][357800559235074][6091 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-07 23:24:23][357800559235074][8106 ms][DEBUG] START check_boot_completed [2025-09-07 23:24:23][357800559235074][8106 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:24:23][357800559235074][8153 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 23:24:23][357800559235074][8153 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:24:23][357800559235074][8215 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 23:24:23][357800559235074][8215 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-07 23:24:26][357800559235074][11230 ms][DEBUG] START runCmdUntilRes#2 [2025-09-07 23:24:26][357800559235074][11230 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357800559235074\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4250\"}'\'' -e'"" [2025-09-07 23:24:29][357800559235074][14854 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_247defe6-24bf-455a-ab20-8e056ac05c91","id":"QR_247defe6-24bf-455a-ab20-8e056ac05c91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:24:30][357800559235074][15010 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-07 23:24:30][357800559235074][15010 ms][DEBUG] END runCmdUntilRes#2 in 3780 ms [2025-09-07 23:24:30][357800559235074][15010 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:41:04][354715115309960][1 ms][INFO] === Request start === [2025-09-07 23:41:04][354715115309960][1 ms][DEBUG] START check_scloud [2025-09-07 23:41:04][354715115309960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:41:04][354715115309960][259 ms][DEBUG] SU: done in 257 ms; outu0_a118 31840 5020 23770780 124824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:41:04][354715115309960][259 ms][DEBUG] targetPkg: running [2025-09-07 23:41:04][354715115309960][259 ms][DEBUG] END check_scloud in 257 ms [2025-09-07 23:41:04][354715115309960][259 ms][DEBUG] START check_boot_completed [2025-09-07 23:41:04][354715115309960][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:41:04][354715115309960][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 23:41:04][354715115309960][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:41:05][354715115309960][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 23:41:05][354715115309960][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-07 23:41:05][354715115309960][337 ms][DEBUG] rawBody.length=1160 [2025-09-07 23:41:05][354715115309960][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715115309960\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8633\"}'\'' -e'"" [2025-09-07 23:41:05][354715115309960][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:41:05][354715115309960][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715115309960\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8633\"}'\'' -e'"" [2025-09-07 23:41:11][354715115309960][6366 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_051b91b9-9fa5-4992-ab30-8dec14b94a4a","id":"QR_051b91b9-9fa5-4992-ab30-8dec14b94a4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:41:11][354715115309960][6523 ms][DEBUG] proc_open done in 6186 ms; code=255; res.len=3343 [2025-09-07 23:41:11][354715115309960][6523 ms][DEBUG] END runCmdUntilRes#1 in 6186 ms [2025-09-07 23:41:11][354715115309960][6523 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:41:14][354715115309960][0 ms][INFO] === Request start === [2025-09-07 23:41:14][354715115309960][1 ms][DEBUG] START check_scloud [2025-09-07 23:41:14][354715115309960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:41:14][354715115309960][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 31840 5020 23948784 135256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:41:14][354715115309960][269 ms][DEBUG] targetPkg: running [2025-09-07 23:41:14][354715115309960][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-07 23:41:14][354715115309960][269 ms][DEBUG] START check_boot_completed [2025-09-07 23:41:14][354715115309960][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:41:15][354715115309960][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-07 23:41:15][354715115309960][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:41:15][354715115309960][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-07 23:41:15][354715115309960][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 23:41:15][354715115309960][362 ms][DEBUG] rawBody.length=1150 [2025-09-07 23:41:15][354715115309960][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715115309960\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9158\"}'\'' -e'"" [2025-09-07 23:41:15][354715115309960][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:41:15][354715115309960][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715115309960\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9158\"}'\'' -e'"" [2025-09-07 23:41:18][354715115309960][4064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9893f153-4299-4643-be48-0ec59b8ae168","id":"QR_9893f153-4299-4643-be48-0ec59b8ae168","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:41:18][354715115309960][4220 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-07 23:41:18][354715115309960][4220 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-07 23:41:18][354715115309960][4220 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:55:04][352546731225484][1 ms][INFO] === Request start === [2025-09-07 23:55:04][352546731225484][1 ms][DEBUG] START check_scloud [2025-09-07 23:55:04][352546731225484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:55:05][352546731225484][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 31840 5020 24034724 146992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:55:05][352546731225484][288 ms][DEBUG] targetPkg: running [2025-09-07 23:55:05][352546731225484][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-07 23:55:05][352546731225484][288 ms][DEBUG] START check_boot_completed [2025-09-07 23:55:05][352546731225484][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:55:05][352546731225484][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-07 23:55:05][352546731225484][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:55:05][352546731225484][382 ms][DEBUG] SU: done in 63 ms; out [2025-09-07 23:55:05][352546731225484][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-07 23:55:05][352546731225484][382 ms][DEBUG] rawBody.length=1161 [2025-09-07 23:55:05][352546731225484][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731225484\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5340\"}'\'' -e'"" [2025-09-07 23:55:05][352546731225484][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:55:05][352546731225484][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731225484\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5340\"}'\'' -e'"" [2025-09-07 23:55:11][352546731225484][6224 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94db4ad3-4c07-4620-b124-68beb0d0558c","id":"QR_94db4ad3-4c07-4620-b124-68beb0d0558c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:55:11][352546731225484][6380 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-09-07 23:55:11][352546731225484][6380 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-09-07 23:55:11][352546731225484][6380 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-07 23:55:14][352546731225484][0 ms][INFO] === Request start === [2025-09-07 23:55:14][352546731225484][1 ms][DEBUG] START check_scloud [2025-09-07 23:55:14][352546731225484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-07 23:55:14][352546731225484][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31840 5020 24201016 157968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-07 23:55:14][352546731225484][300 ms][DEBUG] targetPkg: running [2025-09-07 23:55:14][352546731225484][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-07 23:55:14][352546731225484][300 ms][DEBUG] START check_boot_completed [2025-09-07 23:55:14][352546731225484][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-07 23:55:14][352546731225484][347 ms][DEBUG] ADB: done in 47 ms; out [2025-09-07 23:55:14][352546731225484][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-07 23:55:15][352546731225484][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-07 23:55:15][352546731225484][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-07 23:55:15][352546731225484][409 ms][DEBUG] rawBody.length=1151 [2025-09-07 23:55:15][352546731225484][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731225484\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1416\"}'\'' -e'"" [2025-09-07 23:55:15][352546731225484][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-07 23:55:15][352546731225484][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546731225484\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1416\"}'\'' -e'"" [2025-09-07 23:55:19][352546731225484][4408 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af00ff34-e9d8-4c02-9ad7-d9cd8265d7cf","id":"QR_af00ff34-e9d8-4c02-9ad7-d9cd8265d7cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-07 23:55:19][352546731225484][4564 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-09-07 23:55:19][352546731225484][4564 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-07 23:55:19][352546731225484][4564 ms][INFO] SUCCESS response from frida (len=3343)