[2025-08-20 20:57:07][350274356056280][0 ms][INFO] === Request start ===
[2025-08-20 20:57:07][350274356056280][0 ms][DEBUG] START check_frida
[2025-08-20 20:57:07][350274356056280][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:57:07][350274356056280][313 ms][DEBUG] SU: done in 313 ms; outroot         20950     1 2263084  20148 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:57:07][350274356056280][313 ms][DEBUG] check_frida: running
[2025-08-20 20:57:07][350274356056280][313 ms][DEBUG] END   check_frida in 313 ms
[2025-08-20 20:57:07][350274356056280][313 ms][DEBUG] START check_scloud
[2025-08-20 20:57:07][350274356056280][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:57:07][350274356056280][610 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23624352 79080 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:57:07][350274356056280][610 ms][DEBUG] targetPkg: running
[2025-08-20 20:57:07][350274356056280][610 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 20:57:07][350274356056280][610 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:57:07][350274356056280][610 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU2MDU2MjgwIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMDZYUTJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTMwIn0='" -e "main()" -q"
[2025-08-20 20:57:07][350274356056280][610 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:57:07][350274356056280][610 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU2MDU2MjgwIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMDZYUTJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTMwIn0='" -e "main()" -q"
[2025-08-20 20:57:10][350274356056280][3172 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzU2MDU2MjgwIiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFJDMDZYUTJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzOTMwIn0="\r\n
[2025-08-20 20:57:13][350274356056280][6452 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f69d57e8-e0e0-4db8-9ef7-fb283851528b","id":"QR_f69d57e8-e0e0-4db8-9ef7-fb283851528b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:57:13][350274356056280][6453 ms][DEBUG] proc_open done in 5842 ms; code=0; res.len=3152
[2025-08-20 20:57:13][350274356056280][6453 ms][DEBUG] END   runCmdUntilRes#1 in 5843 ms
[2025-08-20 20:57:13][350274356056280][6453 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:58:01][350100282256340][1 ms][INFO] === Request start ===
[2025-08-20 20:58:01][350100282256340][1 ms][DEBUG] START check_frida
[2025-08-20 20:58:01][350100282256340][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:58:02][350100282256340][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2263084  20108 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:58:02][350100282256340][311 ms][DEBUG] check_frida: running
[2025-08-20 20:58:02][350100282256340][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-20 20:58:02][350100282256340][311 ms][DEBUG] START check_internet
[2025-08-20 20:58:02][350100282256340][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:58:02][350100282256340][764 ms][DEBUG] SU: done in 453 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.377/202.377/202.377/0.000 ms\n
[2025-08-20 20:58:02][350100282256340][764 ms][DEBUG] check_internet: online
[2025-08-20 20:58:02][350100282256340][764 ms][DEBUG] END   check_internet in 453 ms
[2025-08-20 20:58:02][350100282256340][764 ms][DEBUG] START check_scloud
[2025-08-20 20:58:02][350100282256340][764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:58:02][350100282256340][999 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23624384 78692 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:58:02][350100282256340][999 ms][DEBUG] targetPkg: running
[2025-08-20 20:58:02][350100282256340][999 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 20:58:02][350100282256340][999 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:58:02][350100282256340][999 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAwMjgyMjU2MzQwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjIwUTlFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY3OSJ9'" -e "main()" -q"
[2025-08-20 20:58:02][350100282256340][999 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:58:02][350100282256340][999 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTAwMjgyMjU2MzQwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjIwUTlFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY3OSJ9'" -e "main()" -q"
[2025-08-20 20:58:05][350100282256340][3576 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTAwMjgyMjU2MzQwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hCMjIwUTlFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTY3OSJ9"\r\n
[2025-08-20 20:58:07][350700340033985][1 ms][INFO] === Request start ===
[2025-08-20 20:58:07][350100282256340][5825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9691efb-258a-4022-a79c-a44bd9a2c12c","id":"QR_c9691efb-258a-4022-a79c-a44bd9a2c12c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:58:07][350100282256340][5826 ms][DEBUG] proc_open done in 4827 ms; code=0; res.len=3152
[2025-08-20 20:58:07][350100282256340][5826 ms][DEBUG] END   runCmdUntilRes#1 in 4827 ms
[2025-08-20 20:58:07][350100282256340][5826 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:58:08][350700340033985][1014 ms][DEBUG] START check_frida
[2025-08-20 20:58:08][350700340033985][1015 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:58:08][350700340033985][1311 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2279504  19544 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:58:08][350700340033985][1311 ms][DEBUG] check_frida: running
[2025-08-20 20:58:08][350700340033985][1311 ms][DEBUG] END   check_frida in 297 ms
[2025-08-20 20:58:08][350700340033985][1311 ms][DEBUG] START check_internet
[2025-08-20 20:58:08][350700340033985][1311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:58:08][350700340033985][1499 ms][DEBUG] SU: done in 188 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=108 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 108.183/108.183/108.183/0.000 ms\n
[2025-08-20 20:58:08][350700340033985][1499 ms][DEBUG] check_internet: online
[2025-08-20 20:58:08][350700340033985][1499 ms][DEBUG] END   check_internet in 188 ms
[2025-08-20 20:58:08][350700340033985][1499 ms][DEBUG] START check_scloud
[2025-08-20 20:58:08][350700340033985][1499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:58:09][350700340033985][1764 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23624416 79268 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:58:09][350700340033985][1764 ms][DEBUG] targetPkg: running
[2025-08-20 20:58:09][350700340033985][1764 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-20 20:58:09][350700340033985][1764 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:58:09][350700340033985][1765 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQwMDMzOTg1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxMyJ9'" -e "main()" -q"
[2025-08-20 20:58:09][350700340033985][1765 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:58:09][350700340033985][1765 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQwMDMzOTg1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxMyJ9'" -e "main()" -q"
[2025-08-20 20:58:11][350700340033985][4342 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzAwMzQwMDMzOTg1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODAxMyJ9"\r\n
[2025-08-20 20:58:13][350700340033985][5810 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n
[2025-08-20 20:58:13][350700340033985][5810 ms][DEBUG] proc_open done in 4045 ms; code=0; res.len=93
[2025-08-20 20:58:13][350700340033985][5810 ms][DEBUG] END   runCmdUntilRes#1 in 4045 ms
[2025-08-20 20:58:13][350700340033985][5810 ms][INFO] SUCCESS response from frida (len=93)
[2025-08-20 20:58:13][][0 ms][INFO] === Request start ===
[2025-08-20 20:58:13][][0 ms][DEBUG] START check_frida
[2025-08-20 20:58:13][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:58:13][][251 ms][DEBUG] SU: done in 250 ms; outroot         20950     1 2279504  19504 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:58:13][][251 ms][DEBUG] check_frida: running
[2025-08-20 20:58:13][][251 ms][DEBUG] END   check_frida in 250 ms
[2025-08-20 20:58:13][][251 ms][DEBUG] START check_internet
[2025-08-20 20:58:13][][251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:58:14][][454 ms][DEBUG] SU: done in 203 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=105 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 105.237/105.237/105.237/0.000 ms\n
[2025-08-20 20:58:14][][454 ms][DEBUG] check_internet: online
[2025-08-20 20:58:14][][454 ms][DEBUG] END   check_internet in 203 ms
[2025-08-20 20:58:14][][454 ms][DEBUG] START check_scloud
[2025-08-20 20:58:14][][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:58:14][][704 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23624448 78616 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:58:14][][704 ms][DEBUG] targetPkg: running
[2025-08-20 20:58:14][][704 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 20:58:14][][704 ms][DEBUG] rawBody.length=1131
[2025-08-20 20:58:14][][704 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgxOSJ9'" -e "main()" -q"
[2025-08-20 20:58:14][][704 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:58:14][][704 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgxOSJ9'" -e "main()" -q"
[2025-08-20 20:58:16][][3312 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjgxOSJ9"\r\n
[2025-08-20 20:58:18][][4781 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 20:58:18][][4781 ms][DEBUG] proc_open done in 4077 ms; code=0; res.len=107
[2025-08-20 20:58:18][][4781 ms][DEBUG] END   runCmdUntilRes#1 in 4077 ms
[2025-08-20 20:58:18][][4781 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 20:58:18][][0 ms][INFO] === Request start ===
[2025-08-20 20:58:18][][1 ms][DEBUG] START check_frida
[2025-08-20 20:58:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:58:18][][305 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2279504  19516 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:58:18][][305 ms][DEBUG] check_frida: running
[2025-08-20 20:58:18][][305 ms][DEBUG] END   check_frida in 305 ms
[2025-08-20 20:58:18][][305 ms][DEBUG] START check_internet
[2025-08-20 20:58:18][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:58:19][][508 ms][DEBUG] SU: done in 203 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=103 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 103.977/103.977/103.977/0.000 ms\n
[2025-08-20 20:58:19][][508 ms][DEBUG] check_internet: online
[2025-08-20 20:58:19][][508 ms][DEBUG] END   check_internet in 203 ms
[2025-08-20 20:58:19][][508 ms][DEBUG] START check_scloud
[2025-08-20 20:58:19][][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:58:19][][774 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23624480 79148 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:58:19][][774 ms][DEBUG] targetPkg: running
[2025-08-20 20:58:19][][774 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-20 20:58:19][][774 ms][DEBUG] rawBody.length=1131
[2025-08-20 20:58:19][][774 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2MSJ9'" -e "main()" -q"
[2025-08-20 20:58:19][][774 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:58:19][][774 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2MSJ9'" -e "main()" -q"
[2025-08-20 20:58:22][][3351 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUVVIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMTc2MSJ9"\r\n
[2025-08-20 20:58:23][][4742 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 20:58:23][][4742 ms][DEBUG] proc_open done in 3968 ms; code=0; res.len=107
[2025-08-20 20:58:23][][4742 ms][DEBUG] END   runCmdUntilRes#1 in 3968 ms
[2025-08-20 20:58:23][][4742 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 20:58:27][350700340033985][0 ms][INFO] === Request start ===
[2025-08-20 20:58:27][350700340033985][1 ms][DEBUG] START check_frida
[2025-08-20 20:58:27][350700340033985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:58:27][350700340033985][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2279504  19500 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:58:27][350700340033985][302 ms][DEBUG] check_frida: running
[2025-08-20 20:58:27][350700340033985][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-20 20:58:27][350700340033985][302 ms][DEBUG] START check_internet
[2025-08-20 20:58:27][350700340033985][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 20:58:27][350700340033985][567 ms][DEBUG] SU: done in 265 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.631/179.631/179.631/0.000 ms\n
[2025-08-20 20:58:27][350700340033985][567 ms][DEBUG] check_internet: online
[2025-08-20 20:58:27][350700340033985][567 ms][DEBUG] END   check_internet in 265 ms
[2025-08-20 20:58:27][350700340033985][567 ms][DEBUG] START check_scloud
[2025-08-20 20:58:27][350700340033985][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:58:28][350700340033985][848 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624512 78688 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:58:28][350700340033985][848 ms][DEBUG] targetPkg: running
[2025-08-20 20:58:28][350700340033985][848 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 20:58:28][350700340033985][848 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:58:28][350700340033985][848 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQwMDMzOTg1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzkyIn0='" -e "main()" -q"
[2025-08-20 20:58:28][350700340033985][849 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:58:28][350700340033985][849 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzAwMzQwMDMzOTg1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzkyIn0='" -e "main()" -q"
[2025-08-20 20:58:30][350700340033985][3473 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzAwMzQwMDMzOTg1IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1czMUNIQVBKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRVUiIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NzkyIn0="\r\n
[2025-08-20 20:58:33][350700340033985][6394 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8907baf9-a97d-4b4e-b0ec-287c21690faf","id":"QR_8907baf9-a97d-4b4e-b0ec-287c21690faf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:58:33][350700340033985][6394 ms][DEBUG] proc_open done in 5546 ms; code=0; res.len=3152
[2025-08-20 20:58:33][350700340033985][6394 ms][DEBUG] END   runCmdUntilRes#1 in 5546 ms
[2025-08-20 20:58:33][350700340033985][6394 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:59:05][351477975833943][0 ms][INFO] === Request start ===
[2025-08-20 20:59:05][351477975833943][1 ms][DEBUG] START check_frida
[2025-08-20 20:59:05][351477975833943][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:59:05][351477975833943][308 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084  19504 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:59:05][351477975833943][308 ms][DEBUG] check_frida: running
[2025-08-20 20:59:05][351477975833943][308 ms][DEBUG] END   check_frida in 307 ms
[2025-08-20 20:59:05][351477975833943][308 ms][DEBUG] START check_scloud
[2025-08-20 20:59:05][351477975833943][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:59:06][351477975833943][605 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23624544 79304 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:59:06][351477975833943][605 ms][DEBUG] targetPkg: running
[2025-08-20 20:59:06][351477975833943][605 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 20:59:06][351477975833943][605 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:59:06][351477975833943][605 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc1ODMzOTQzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDkzNENNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQwMCJ9'" -e "main()" -q"
[2025-08-20 20:59:06][351477975833943][605 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:59:06][351477975833943][605 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDc3OTc1ODMzOTQzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDkzNENNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQwMCJ9'" -e "main()" -q"
[2025-08-20 20:59:08][351477975833943][3214 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDc3OTc1ODMzOTQzIiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFhCMDkzNENNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDQwMCJ9"\r\n
[2025-08-20 20:59:10][351477975833943][5291 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f47712d-c4ef-4aa2-be4b-7cc222d0a081","id":"QR_1f47712d-c4ef-4aa2-be4b-7cc222d0a081","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:59:10][351477975833943][5291 ms][DEBUG] proc_open done in 4686 ms; code=0; res.len=3152
[2025-08-20 20:59:10][351477975833943][5291 ms][DEBUG] END   runCmdUntilRes#1 in 4686 ms
[2025-08-20 20:59:10][351477975833943][5291 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:59:14][352397450859644][0 ms][INFO] === Request start ===
[2025-08-20 20:59:14][352397450859644][0 ms][DEBUG] START check_frida
[2025-08-20 20:59:14][352397450859644][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:59:15][352397450859644][294 ms][DEBUG] SU: done in 293 ms; outroot         20950     1 2279504  19528 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:59:15][352397450859644][294 ms][DEBUG] check_frida: running
[2025-08-20 20:59:15][352397450859644][294 ms][DEBUG] END   check_frida in 294 ms
[2025-08-20 20:59:15][352397450859644][294 ms][DEBUG] START check_scloud
[2025-08-20 20:59:15][352397450859644][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:59:15][352397450859644][590 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23624576 78592 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:59:15][352397450859644][590 ms][DEBUG] targetPkg: running
[2025-08-20 20:59:15][352397450859644][590 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-20 20:59:15][352397450859644][590 ms][DEBUG] rawBody.length=1161
[2025-08-20 20:59:15][352397450859644][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUwODU5NjQ0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MEMzSzRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkxNCJ9'" -e "main()" -q"
[2025-08-20 20:59:15][352397450859644][590 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:59:15][352397450859644][590 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk3NDUwODU5NjQ0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MEMzSzRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkxNCJ9'" -e "main()" -q"
[2025-08-20 20:59:17][352397450859644][3215 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk3NDUwODU5NjQ0IiwibW9kZWwiOiJTTS1NMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ4MEMzSzRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjkxNCJ9"\r\n
[2025-08-20 20:59:19][352397450859644][4949 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f885e8af-5a9a-442d-8b0b-bb940dcf17bf","id":"QR_f885e8af-5a9a-442d-8b0b-bb940dcf17bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:59:19][352397450859644][4949 ms][DEBUG] proc_open done in 4358 ms; code=0; res.len=3152
[2025-08-20 20:59:19][352397450859644][4949 ms][DEBUG] END   runCmdUntilRes#1 in 4358 ms
[2025-08-20 20:59:19][352397450859644][4949 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 20:59:35][351692910687416][0 ms][INFO] === Request start ===
[2025-08-20 20:59:35][351692910687416][1 ms][DEBUG] START check_frida
[2025-08-20 20:59:35][351692910687416][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 20:59:35][351692910687416][258 ms][DEBUG] SU: done in 257 ms; outroot         20950     1 2263084  19588 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 20:59:35][351692910687416][258 ms][DEBUG] check_frida: running
[2025-08-20 20:59:35][351692910687416][258 ms][DEBUG] END   check_frida in 257 ms
[2025-08-20 20:59:35][351692910687416][258 ms][DEBUG] START check_scloud
[2025-08-20 20:59:35][351692910687416][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 20:59:35][351692910687416][539 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624608 79360 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 20:59:35][351692910687416][539 ms][DEBUG] targetPkg: running
[2025-08-20 20:59:35][351692910687416][539 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 20:59:35][351692910687416][539 ms][DEBUG] rawBody.length=1160
[2025-08-20 20:59:35][351692910687416][539 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjkyOTEwNjg3NDE2IiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gyMDQ2ODlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQ0In0='" -e "main()" -q"
[2025-08-20 20:59:35][351692910687416][539 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 20:59:35][351692910687416][539 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjkyOTEwNjg3NDE2IiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gyMDQ2ODlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQ0In0='" -e "main()" -q"
[2025-08-20 20:59:38][351692910687416][3163 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjkyOTEwNjg3NDE2IiwibW9kZWwiOiJTTS1TOTExVyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gyMDQ2ODlKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQ0In0="\r\n
[2025-08-20 20:59:41][351692910687416][6459 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd70e7e2-4489-4edd-b832-24c4f2092306","id":"QR_dd70e7e2-4489-4edd-b832-24c4f2092306","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 20:59:41][351692910687416][6460 ms][DEBUG] proc_open done in 5921 ms; code=0; res.len=3152
[2025-08-20 20:59:41][351692910687416][6460 ms][DEBUG] END   runCmdUntilRes#1 in 5921 ms
[2025-08-20 20:59:41][351692910687416][6460 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:00:36][353129155198286][1 ms][INFO] === Request start ===
[2025-08-20 21:00:36][353129155198286][1 ms][DEBUG] START check_frida
[2025-08-20 21:00:36][353129155198286][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:00:36][353129155198286][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084  16676 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:00:36][353129155198286][296 ms][DEBUG] check_frida: running
[2025-08-20 21:00:36][353129155198286][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-20 21:00:36][353129155198286][296 ms][DEBUG] START check_internet
[2025-08-20 21:00:36][353129155198286][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:00:36][353129155198286][561 ms][DEBUG] SU: done in 265 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.848/169.848/169.848/0.000 ms\n
[2025-08-20 21:00:36][353129155198286][562 ms][DEBUG] check_internet: online
[2025-08-20 21:00:36][353129155198286][562 ms][DEBUG] END   check_internet in 266 ms
[2025-08-20 21:00:36][353129155198286][562 ms][DEBUG] START check_scloud
[2025-08-20 21:00:36][353129155198286][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:00:37][353129155198286][843 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624640 77596 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:00:37][353129155198286][843 ms][DEBUG] targetPkg: running
[2025-08-20 21:00:37][353129155198286][843 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:00:37][353129155198286][843 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:00:37][353129155198286][843 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTI5MTU1MTk4Mjg2IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMFM0UUtCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1NyJ9'" -e "main()" -q"
[2025-08-20 21:00:37][353129155198286][843 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:00:37][353129155198286][843 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMTI5MTU1MTk4Mjg2IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMFM0UUtCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1NyJ9'" -e "main()" -q"
[2025-08-20 21:00:39][353129155198286][3467 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMTI5MTU1MTk4Mjg2IiwibW9kZWwiOiJTTS1BMTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RDMFM0UUtCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzY1NyJ9"\r\n
[2025-08-20 21:00:42][353129155198286][5966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f262d2a-b600-44c3-9b22-deac60226b55","id":"QR_5f262d2a-b600-44c3-9b22-deac60226b55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:00:42][353129155198286][5967 ms][DEBUG] proc_open done in 5123 ms; code=0; res.len=3152
[2025-08-20 21:00:42][353129155198286][5967 ms][DEBUG] END   runCmdUntilRes#1 in 5124 ms
[2025-08-20 21:00:42][353129155198286][5967 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:03:10][354702114585360][1 ms][INFO] === Request start ===
[2025-08-20 21:03:10][354702114585360][2 ms][DEBUG] START check_frida
[2025-08-20 21:03:10][354702114585360][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:03:10][354702114585360][303 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084  16112 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:03:10][354702114585360][303 ms][DEBUG] check_frida: running
[2025-08-20 21:03:10][354702114585360][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-20 21:03:10][354702114585360][303 ms][DEBUG] START check_scloud
[2025-08-20 21:03:10][354702114585360][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:03:10][354702114585360][615 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23624672 77092 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:03:10][354702114585360][615 ms][DEBUG] targetPkg: running
[2025-08-20 21:03:10][354702114585360][615 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-20 21:03:10][354702114585360][615 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:03:10][354702114585360][615 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzAyMTE0NTg1MzYwIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFIxMDVIRjdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzIyIn0='" -e "main()" -q"
[2025-08-20 21:03:10][354702114585360][615 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:03:10][354702114585360][615 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzAyMTE0NTg1MzYwIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFIxMDVIRjdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzIyIn0='" -e "main()" -q"
[2025-08-20 21:03:13][354702114585360][3193 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzAyMTE0NTg1MzYwIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFIxMDVIRjdZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NzIyIn0="\r\n
[2025-08-20 21:03:16][354702114585360][6239 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fa67809-24e3-4ca7-91aa-99500a6f8cb4","id":"QR_5fa67809-24e3-4ca7-91aa-99500a6f8cb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:03:16][354702114585360][6239 ms][DEBUG] proc_open done in 5624 ms; code=0; res.len=3152
[2025-08-20 21:03:16][354702114585360][6239 ms][DEBUG] END   runCmdUntilRes#1 in 5624 ms
[2025-08-20 21:03:16][354702114585360][6239 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:04:26][357651717390750][1 ms][INFO] === Request start ===
[2025-08-20 21:04:26][357651717390750][2 ms][DEBUG] START check_frida
[2025-08-20 21:04:26][357651717390750][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:04:26][357651717390750][247 ms][DEBUG] SU: done in 245 ms; outroot         20950     1 2262072  14056 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:04:26][357651717390750][247 ms][DEBUG] check_frida: running
[2025-08-20 21:04:26][357651717390750][247 ms][DEBUG] END   check_frida in 245 ms
[2025-08-20 21:04:26][357651717390750][247 ms][DEBUG] START check_internet
[2025-08-20 21:04:26][357651717390750][247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:04:27][357651717390750][684 ms][DEBUG] SU: done in 437 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.108/201.108/201.108/0.000 ms\n
[2025-08-20 21:04:27][357651717390750][684 ms][DEBUG] check_internet: online
[2025-08-20 21:04:27][357651717390750][684 ms][DEBUG] END   check_internet in 437 ms
[2025-08-20 21:04:27][357651717390750][684 ms][DEBUG] START check_scloud
[2025-08-20 21:04:27][357651717390750][684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:04:27][357651717390750][919 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23624704 77688 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:04:27][357651717390750][919 ms][DEBUG] targetPkg: running
[2025-08-20 21:04:27][357651717390750][919 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-20 21:04:27][357651717390750][919 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:04:27][357651717390750][919 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE3MzkwNzUwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDNXWEtFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDczIn0='" -e "main()" -q"
[2025-08-20 21:04:27][357651717390750][919 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:04:27][357651717390750][919 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE3MzkwNzUwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDNXWEtFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDczIn0='" -e "main()" -q"
[2025-08-20 21:04:30][357651717390750][3574 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE3MzkwNzUwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ4MDNXWEtFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDczIn0="\r\n
[2025-08-20 21:04:34][357651717390750][8136 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f77de413-cbe0-459e-a59b-6a12214daa06","id":"QR_f77de413-cbe0-459e-a59b-6a12214daa06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:04:34][357651717390750][8136 ms][DEBUG] proc_open done in 7217 ms; code=0; res.len=3152
[2025-08-20 21:04:34][357651717390750][8136 ms][DEBUG] END   runCmdUntilRes#1 in 7217 ms
[2025-08-20 21:04:34][357651717390750][8136 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:05:06][356663765202069][0 ms][INFO] === Request start ===
[2025-08-20 21:05:06][356663765202069][0 ms][DEBUG] START check_frida
[2025-08-20 21:05:06][356663765202069][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:05:06][356663765202069][272 ms][DEBUG] SU: done in 272 ms; outroot         20950     1 2263084  14080 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:05:06][356663765202069][272 ms][DEBUG] check_frida: running
[2025-08-20 21:05:06][356663765202069][272 ms][DEBUG] END   check_frida in 272 ms
[2025-08-20 21:05:06][356663765202069][272 ms][DEBUG] START check_scloud
[2025-08-20 21:05:06][356663765202069][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:05:07][356663765202069][553 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624736 77236 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:05:07][356663765202069][553 ms][DEBUG] targetPkg: running
[2025-08-20 21:05:07][356663765202069][553 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:05:07][356663765202069][553 ms][DEBUG] rawBody.length=1159
[2025-08-20 21:05:07][356663765202069][553 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY1MjAyMDY5IiwibW9kZWwiOiJTTS1UNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTUIwSlJDNVQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiUEVPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzc0NDMifQ=='" -e "main()" -q"
[2025-08-20 21:05:07][356663765202069][553 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:05:07][356663765202069][553 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NjYzNzY1MjAyMDY5IiwibW9kZWwiOiJTTS1UNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTUIwSlJDNVQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiUEVPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzc0NDMifQ=='" -e "main()" -q"
[2025-08-20 21:05:07][350181272176342][0 ms][INFO] === Request start ===
[2025-08-20 21:05:09][356663765202069][3209 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NjYzNzY1MjAyMDY5IiwibW9kZWwiOiJTTS1UNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyTUIwSlJDNVQiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiUEVPIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzc0NDMifQ=="\r\n
[2025-08-20 21:05:12][356663765202069][6052 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4899991-6ebe-4b7f-be7c-83e5c7c6e554","id":"QR_a4899991-6ebe-4b7f-be7c-83e5c7c6e554","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:05:12][356663765202069][6052 ms][DEBUG] proc_open done in 5499 ms; code=0; res.len=3152
[2025-08-20 21:05:12][356663765202069][6052 ms][DEBUG] END   runCmdUntilRes#1 in 5499 ms
[2025-08-20 21:05:12][356663765202069][6052 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:05:13][350181272176342][6089 ms][DEBUG] START check_frida
[2025-08-20 21:05:13][350181272176342][6090 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:05:13][350181272176342][6371 ms][DEBUG] SU: done in 281 ms; outroot         20950     1 2279504  14084 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:05:13][350181272176342][6371 ms][DEBUG] check_frida: running
[2025-08-20 21:05:13][350181272176342][6371 ms][DEBUG] END   check_frida in 281 ms
[2025-08-20 21:05:13][350181272176342][6371 ms][DEBUG] START check_scloud
[2025-08-20 21:05:13][350181272176342][6371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:05:14][350181272176342][6667 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23624768 77788 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:05:14][350181272176342][6667 ms][DEBUG] targetPkg: running
[2025-08-20 21:05:14][350181272176342][6667 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:05:14][350181272176342][6668 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:05:14][350181272176342][6668 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTgxMjcyMTc2MzQyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MFpMTkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDEzIn0='" -e "main()" -q"
[2025-08-20 21:05:14][350181272176342][6668 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:05:14][350181272176342][6668 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTgxMjcyMTc2MzQyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MFpMTkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDEzIn0='" -e "main()" -q"
[2025-08-20 21:05:16][350181272176342][9323 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTgxMjcyMTc2MzQyIiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c1MFpMTkhNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NDEzIn0="\r\n
[2025-08-20 21:05:19][350181272176342][12229 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3874a69f-fcce-4033-9931-3fd5df99ffa2","id":"QR_3874a69f-fcce-4033-9931-3fd5df99ffa2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:05:19][350181272176342][12229 ms][DEBUG] proc_open done in 5561 ms; code=0; res.len=3152
[2025-08-20 21:05:19][350181272176342][12229 ms][DEBUG] END   runCmdUntilRes#1 in 5561 ms
[2025-08-20 21:05:19][350181272176342][12229 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:07:09][352429896577900][0 ms][INFO] === Request start ===
[2025-08-20 21:07:09][352429896577900][0 ms][DEBUG] START check_frida
[2025-08-20 21:07:09][352429896577900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:07:10][352429896577900][274 ms][DEBUG] SU: done in 274 ms; outroot         20950     1 2263084  14088 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:07:10][352429896577900][274 ms][DEBUG] check_frida: running
[2025-08-20 21:07:10][352429896577900][274 ms][DEBUG] END   check_frida in 274 ms
[2025-08-20 21:07:10][352429896577900][274 ms][DEBUG] START check_scloud
[2025-08-20 21:07:10][352429896577900][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:07:10][352429896577900][556 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624800 77052 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:07:10][352429896577900][556 ms][DEBUG] targetPkg: running
[2025-08-20 21:07:10][352429896577900][556 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:07:10][352429896577900][556 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:07:10][352429896577900][556 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDI5ODk2NTc3OTAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzIwIn0='" -e "main()" -q"
[2025-08-20 21:07:10][352429896577900][556 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:07:10][352429896577900][556 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDI5ODk2NTc3OTAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzIwIn0='" -e "main()" -q"
[2025-08-20 21:07:13][352429896577900][3195 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDI5ODk2NTc3OTAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNzIwIn0="\r\n
[2025-08-20 21:07:15][352429896577900][5164 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-20 21:07:15][352429896577900][5164 ms][DEBUG] proc_open done in 4608 ms; code=0; res.len=115
[2025-08-20 21:07:15][352429896577900][5164 ms][DEBUG] END   runCmdUntilRes#1 in 4608 ms
[2025-08-20 21:07:15][352429896577900][5164 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-20 21:07:15][][0 ms][INFO] === Request start ===
[2025-08-20 21:07:15][][1 ms][DEBUG] START check_frida
[2025-08-20 21:07:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:07:15][][251 ms][DEBUG] SU: done in 250 ms; outroot         20950     1 2279504  14112 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:07:15][][251 ms][DEBUG] check_frida: running
[2025-08-20 21:07:15][][251 ms][DEBUG] END   check_frida in 250 ms
[2025-08-20 21:07:15][][251 ms][DEBUG] START check_scloud
[2025-08-20 21:07:15][][251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:07:15][][532 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624832 77592 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:07:15][][532 ms][DEBUG] targetPkg: running
[2025-08-20 21:07:15][][532 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:07:15][][532 ms][DEBUG] rawBody.length=1130
[2025-08-20 21:07:15][][533 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjM4In0='" -e "main()" -q"
[2025-08-20 21:07:15][][533 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:07:15][][533 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjM4In0='" -e "main()" -q"
[2025-08-20 21:07:18][][3141 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NjM4In0="\r\n
[2025-08-20 21:07:20][][5016 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-20 21:07:20][][5016 ms][DEBUG] proc_open done in 4483 ms; code=0; res.len=115
[2025-08-20 21:07:20][][5016 ms][DEBUG] END   runCmdUntilRes#1 in 4483 ms
[2025-08-20 21:07:20][][5016 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-20 21:07:20][][0 ms][INFO] === Request start ===
[2025-08-20 21:07:20][][1 ms][DEBUG] START check_frida
[2025-08-20 21:07:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:07:21][][268 ms][DEBUG] SU: done in 267 ms; outroot         20950     1 2279504  14108 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:07:21][][268 ms][DEBUG] check_frida: running
[2025-08-20 21:07:21][][268 ms][DEBUG] END   check_frida in 268 ms
[2025-08-20 21:07:21][][268 ms][DEBUG] START check_scloud
[2025-08-20 21:07:21][][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:07:21][][565 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23624864 78128 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:07:21][][565 ms][DEBUG] targetPkg: running
[2025-08-20 21:07:21][][565 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:07:21][][565 ms][DEBUG] rawBody.length=1130
[2025-08-20 21:07:21][][566 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTAyIn0='" -e "main()" -q"
[2025-08-20 21:07:21][][566 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:07:21][][566 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTAyIn0='" -e "main()" -q"
[2025-08-20 21:07:24][][3205 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxOTAyIn0="\r\n
[2025-08-20 21:07:26][][5564 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n
[2025-08-20 21:07:26][][5564 ms][DEBUG] proc_open done in 4998 ms; code=0; res.len=115
[2025-08-20 21:07:26][][5564 ms][DEBUG] END   runCmdUntilRes#1 in 4999 ms
[2025-08-20 21:07:26][][5564 ms][INFO] SUCCESS response from frida (len=115)
[2025-08-20 21:07:27][352429896577900][0 ms][INFO] === Request start ===
[2025-08-20 21:07:27][352429896577900][0 ms][DEBUG] START check_frida
[2025-08-20 21:07:27][352429896577900][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:07:27][352429896577900][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2279504  14092 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:07:27][352429896577900][302 ms][DEBUG] check_frida: running
[2025-08-20 21:07:27][352429896577900][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-20 21:07:27][352429896577900][302 ms][DEBUG] START check_scloud
[2025-08-20 21:07:27][352429896577900][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:07:28][352429896577900][583 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23624896 77684 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:07:28][352429896577900][583 ms][DEBUG] targetPkg: running
[2025-08-20 21:07:28][352429896577900][583 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:07:28][352429896577900][583 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:07:28][352429896577900][583 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDI5ODk2NTc3OTAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUyNCJ9'" -e "main()" -q"
[2025-08-20 21:07:28][352429896577900][583 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:07:28][352429896577900][583 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDI5ODk2NTc3OTAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUyNCJ9'" -e "main()" -q"
[2025-08-20 21:07:30][352429896577900][3212 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDI5ODk2NTc3OTAwIiwibW9kZWwiOiJTTS1BMzM2TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJRQ1Q5MDJTMUZKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTUyNCJ9"\r\n
[2025-08-20 21:07:32][352429896577900][5258 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18dc4ca5-382f-4283-bc0e-c089820991cf","id":"QR_18dc4ca5-382f-4283-bc0e-c089820991cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:07:32][352429896577900][5258 ms][DEBUG] proc_open done in 4675 ms; code=0; res.len=3152
[2025-08-20 21:07:32][352429896577900][5259 ms][DEBUG] END   runCmdUntilRes#1 in 4675 ms
[2025-08-20 21:07:32][352429896577900][5259 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:09:35][351690514032641][1 ms][INFO] === Request start ===
[2025-08-20 21:09:35][351690514032641][2 ms][DEBUG] START check_frida
[2025-08-20 21:09:35][351690514032641][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:09:35][351690514032641][310 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2278492  14084 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:09:35][351690514032641][310 ms][DEBUG] check_frida: running
[2025-08-20 21:09:35][351690514032641][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-20 21:09:35][351690514032641][310 ms][DEBUG] START check_scloud
[2025-08-20 21:09:35][351690514032641][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:09:36][351690514032641][607 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23624928 78248 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:09:36][351690514032641][607 ms][DEBUG] targetPkg: running
[2025-08-20 21:09:36][351690514032641][607 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:09:36][351690514032641][607 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:09:36][351690514032641][607 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjkwNTE0MDMyNjQxIiwibW9kZWwiOiJTTS1BNTM2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMUhRWk5NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzg3In0='" -e "main()" -q"
[2025-08-20 21:09:36][351690514032641][607 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:09:36][351690514032641][607 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjkwNTE0MDMyNjQxIiwibW9kZWwiOiJTTS1BNTM2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMUhRWk5NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzg3In0='" -e "main()" -q"
[2025-08-20 21:09:38][351690514032641][3231 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjkwNTE0MDMyNjQxIiwibW9kZWwiOiJTTS1BNTM2VyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1RBMUhRWk5NIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzg3In0="\r\n
[2025-08-20 21:09:42][351690514032641][6590 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2dcceaf-1c04-4e48-bf1f-daa9af85c002","id":"QR_d2dcceaf-1c04-4e48-bf1f-daa9af85c002","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:09:42][351690514032641][6590 ms][DEBUG] proc_open done in 5983 ms; code=0; res.len=3152
[2025-08-20 21:09:42][351690514032641][6590 ms][DEBUG] END   runCmdUntilRes#1 in 5983 ms
[2025-08-20 21:09:42][351690514032641][6590 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:11:52][353294620581647][1 ms][INFO] === Request start ===
[2025-08-20 21:11:52][353294620581647][2 ms][DEBUG] START check_frida
[2025-08-20 21:11:52][353294620581647][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:11:52][353294620581647][321 ms][DEBUG] SU: done in 319 ms; outroot         20950     1 2263084  14100 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:11:52][353294620581647][321 ms][DEBUG] check_frida: running
[2025-08-20 21:11:52][353294620581647][321 ms][DEBUG] END   check_frida in 319 ms
[2025-08-20 21:11:52][353294620581647][321 ms][DEBUG] START check_scloud
[2025-08-20 21:11:52][353294620581647][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:11:53][353294620581647][633 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23624960 77644 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:11:53][353294620581647][634 ms][DEBUG] targetPkg: running
[2025-08-20 21:11:53][353294620581647][634 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-20 21:11:53][353294620581647][634 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:11:53][353294620581647][634 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjk0NjIwNTgxNjQ3IiwibW9kZWwiOiJTTS1BMzY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kzMDVEQ0FaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTIyIn0='" -e "main()" -q"
[2025-08-20 21:11:53][353294620581647][634 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:11:53][353294620581647][634 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjk0NjIwNTgxNjQ3IiwibW9kZWwiOiJTTS1BMzY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kzMDVEQ0FaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTIyIn0='" -e "main()" -q"
[2025-08-20 21:11:55][353294620581647][3258 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjk0NjIwNTgxNjQ3IiwibW9kZWwiOiJTTS1BMzY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1kzMDVEQ0FaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTIyIn0="\r\n
[2025-08-20 21:11:59][353294620581647][6663 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17a431b1-f445-4714-bcea-05b3a858ef9b","id":"QR_17a431b1-f445-4714-bcea-05b3a858ef9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:11:59][353294620581647][6663 ms][DEBUG] proc_open done in 6029 ms; code=0; res.len=3152
[2025-08-20 21:11:59][353294620581647][6663 ms][DEBUG] END   runCmdUntilRes#1 in 6029 ms
[2025-08-20 21:11:59][353294620581647][6663 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:12:02][353026647864170][0 ms][INFO] === Request start ===
[2025-08-20 21:12:02][353026647864170][1 ms][DEBUG] START check_frida
[2025-08-20 21:12:02][353026647864170][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:12:02][353026647864170][260 ms][DEBUG] SU: done in 259 ms; outroot         20950     1 2279504  14108 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:12:02][353026647864170][260 ms][DEBUG] check_frida: running
[2025-08-20 21:12:02][353026647864170][260 ms][DEBUG] END   check_frida in 259 ms
[2025-08-20 21:12:02][353026647864170][260 ms][DEBUG] START check_internet
[2025-08-20 21:12:02][353026647864170][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:12:03][353026647864170][713 ms][DEBUG] SU: done in 453 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.453/201.453/201.453/0.000 ms\n
[2025-08-20 21:12:03][353026647864170][713 ms][DEBUG] check_internet: online
[2025-08-20 21:12:03][353026647864170][713 ms][DEBUG] END   check_internet in 453 ms
[2025-08-20 21:12:03][353026647864170][713 ms][DEBUG] START check_scloud
[2025-08-20 21:12:03][353026647864170][713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:12:03][353026647864170][947 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23624992 78204 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:12:03][353026647864170][947 ms][DEBUG] targetPkg: running
[2025-08-20 21:12:03][353026647864170][947 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 21:12:03][353026647864170][947 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:12:03][353026647864170][947 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQ3ODY0MTcwIiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0Mk42SEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MDI1In0='" -e "main()" -q"
[2025-08-20 21:12:03][353026647864170][947 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:12:03][353026647864170][947 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMDI2NjQ3ODY0MTcwIiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0Mk42SEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MDI1In0='" -e "main()" -q"
[2025-08-20 21:12:06][353026647864170][3540 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMDI2NjQ3ODY0MTcwIiwibW9kZWwiOiJTTS1BMTY2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1k0Mk42SEdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MDI1In0="\r\n
[2025-08-20 21:12:09][353026647864170][7242 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa50b26b-0d91-4489-bb14-f606da50c64c","id":"QR_fa50b26b-0d91-4489-bb14-f606da50c64c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:12:09][353026647864170][7242 ms][DEBUG] proc_open done in 6295 ms; code=0; res.len=3152
[2025-08-20 21:12:09][353026647864170][7242 ms][DEBUG] END   runCmdUntilRes#1 in 6295 ms
[2025-08-20 21:12:09][353026647864170][7242 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:13:06][350792520224781][0 ms][INFO] === Request start ===
[2025-08-20 21:13:06][350792520224781][1 ms][DEBUG] START check_frida
[2025-08-20 21:13:06][350792520224781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:13:07][350792520224781][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2263084  13556 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:13:07][350792520224781][301 ms][DEBUG] check_frida: running
[2025-08-20 21:13:07][350792520224781][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-20 21:13:07][350792520224781][301 ms][DEBUG] START check_scloud
[2025-08-20 21:13:07][350792520224781][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:13:07][350792520224781][596 ms][DEBUG] SU: done in 295 ms; outu0_a118      20979 10674 23625024 77592 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:13:07][350792520224781][596 ms][DEBUG] targetPkg: running
[2025-08-20 21:13:07][350792520224781][596 ms][DEBUG] END   check_scloud in 295 ms
[2025-08-20 21:13:07][350792520224781][596 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:13:07][350792520224781][596 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzkyNTIwMjI0NzgxIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDBWS0hYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU0In0='" -e "main()" -q"
[2025-08-20 21:13:07][350792520224781][596 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:13:07][350792520224781][596 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzkyNTIwMjI0NzgxIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDBWS0hYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU0In0='" -e "main()" -q"
[2025-08-20 21:13:10][350792520224781][3251 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzkyNTIwMjI0NzgxIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFhDMDBWS0hYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU0In0="\r\n
[2025-08-20 21:13:14][350792520224781][7688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70710d90-ec42-42fc-b6af-bf7117b0e993","id":"QR_70710d90-ec42-42fc-b6af-bf7117b0e993","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:13:14][350792520224781][7688 ms][DEBUG] proc_open done in 7092 ms; code=0; res.len=3152
[2025-08-20 21:13:14][350792520224781][7688 ms][DEBUG] END   runCmdUntilRes#1 in 7092 ms
[2025-08-20 21:13:14][350792520224781][7688 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:15:08][358590481869079][1 ms][INFO] === Request start ===
[2025-08-20 21:15:08][358590481869079][2 ms][DEBUG] START check_frida
[2025-08-20 21:15:08][358590481869079][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:15:08][358590481869079][304 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084  13516 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:15:08][358590481869079][304 ms][DEBUG] check_frida: running
[2025-08-20 21:15:08][358590481869079][304 ms][DEBUG] END   check_frida in 303 ms
[2025-08-20 21:15:08][358590481869079][304 ms][DEBUG] START check_scloud
[2025-08-20 21:15:08][358590481869079][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:15:09][358590481869079][601 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23625056 76480 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:15:09][358590481869079][601 ms][DEBUG] targetPkg: running
[2025-08-20 21:15:09][358590481869079][601 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:15:09][358590481869079][601 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:15:09][358590481869079][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTkwNDgxODY5MDc5IiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MDJNQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDUxOSJ9'" -e "main()" -q"
[2025-08-20 21:15:09][358590481869079][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:15:09][358590481869079][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NTkwNDgxODY5MDc5IiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MDJNQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDUxOSJ9'" -e "main()" -q"
[2025-08-20 21:15:11][358590481869079][3225 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NTkwNDgxODY5MDc5IiwibW9kZWwiOiJTTS1BMjE3RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOE45MDJNQ1pQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJES1IiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNDUxOSJ9"\r\n
[2025-08-20 21:15:13][358590481869079][5506 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f3bfa5f-efb6-484a-a59d-a901bd4debce","id":"QR_1f3bfa5f-efb6-484a-a59d-a901bd4debce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:15:13][358590481869079][5506 ms][DEBUG] proc_open done in 4905 ms; code=0; res.len=3152
[2025-08-20 21:15:13][358590481869079][5506 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-20 21:15:13][358590481869079][5506 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:15:20][358163260351956][0 ms][INFO] === Request start ===
[2025-08-20 21:15:20][358163260351956][1 ms][DEBUG] START check_frida
[2025-08-20 21:15:20][358163260351956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:15:20][358163260351956][319 ms][DEBUG] SU: done in 318 ms; outroot         20950     1 2279504  13480 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:15:20][358163260351956][319 ms][DEBUG] check_frida: running
[2025-08-20 21:15:20][358163260351956][319 ms][DEBUG] END   check_frida in 318 ms
[2025-08-20 21:15:20][358163260351956][319 ms][DEBUG] START check_scloud
[2025-08-20 21:15:20][358163260351956][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:15:21][358163260351956][601 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625088 77076 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:15:21][358163260351956][601 ms][DEBUG] targetPkg: running
[2025-08-20 21:15:21][358163260351956][601 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:15:21][358163260351956][601 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:15:21][358163260351956][601 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTYzMjYwMzUxOTU2IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MTdIWlJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDE4In0='" -e "main()" -q"
[2025-08-20 21:15:21][358163260351956][601 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:15:21][358163260351956][601 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTYzMjYwMzUxOTU2IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MTdIWlJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDE4In0='" -e "main()" -q"
[2025-08-20 21:15:23][358163260351956][3209 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTYzMjYwMzUxOTU2IiwibW9kZWwiOiJTTS1TOTE4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c4MTdIWlJIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMDE4In0="\r\n
[2025-08-20 21:15:31][358163260351956][10958 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f7479e8-ffe5-4cb5-b5df-da3833f34b27","id":"QR_6f7479e8-ffe5-4cb5-b5df-da3833f34b27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:15:31][358163260351956][10958 ms][DEBUG] proc_open done in 10357 ms; code=0; res.len=3152
[2025-08-20 21:15:31][358163260351956][10958 ms][DEBUG] END   runCmdUntilRes#1 in 10357 ms
[2025-08-20 21:15:31][358163260351956][10958 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:16:04][350320368918676][0 ms][INFO] === Request start ===
[2025-08-20 21:16:04][350320368918676][1 ms][DEBUG] START check_frida
[2025-08-20 21:16:04][350320368918676][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:16:04][350320368918676][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084  13548 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:16:04][350320368918676][303 ms][DEBUG] check_frida: running
[2025-08-20 21:16:04][350320368918676][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-20 21:16:04][350320368918676][303 ms][DEBUG] START check_internet
[2025-08-20 21:16:04][350320368918676][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:16:04][350320368918676][506 ms][DEBUG] SU: done in 203 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=109 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 109.924/109.924/109.924/0.000 ms\n
[2025-08-20 21:16:04][350320368918676][506 ms][DEBUG] check_internet: online
[2025-08-20 21:16:04][350320368918676][506 ms][DEBUG] END   check_internet in 203 ms
[2025-08-20 21:16:04][350320368918676][506 ms][DEBUG] START check_scloud
[2025-08-20 21:16:04][350320368918676][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:16:05][350320368918676][740 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23625120 77672 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:16:05][350320368918676][740 ms][DEBUG] targetPkg: running
[2025-08-20 21:16:05][350320368918676][740 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 21:16:05][350320368918676][740 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:16:05][350320368918676][740 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzY4OTE4Njc2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MkUxNDJWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDAwIn0='" -e "main()" -q"
[2025-08-20 21:16:05][350320368918676][740 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:16:05][350320368918676][740 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMzIwMzY4OTE4Njc2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MkUxNDJWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDAwIn0='" -e "main()" -q"
[2025-08-20 21:16:07][350320368918676][3380 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMzIwMzY4OTE4Njc2IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MkUxNDJWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDAwIn0="\r\n
[2025-08-20 21:16:11][350320368918676][6754 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d027e205-eaa4-44aa-bafa-ce2801023d1a","id":"QR_d027e205-eaa4-44aa-bafa-ce2801023d1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:16:11][350320368918676][6755 ms][DEBUG] proc_open done in 6014 ms; code=0; res.len=3152
[2025-08-20 21:16:11][350320368918676][6755 ms][DEBUG] END   runCmdUntilRes#1 in 6014 ms
[2025-08-20 21:16:11][350320368918676][6755 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:20:28][357651711392943][1 ms][INFO] === Request start ===
[2025-08-20 21:20:28][357651711392943][2 ms][DEBUG] START check_frida
[2025-08-20 21:20:28][357651711392943][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:20:28][357651711392943][310 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084  13588 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:20:28][357651711392943][310 ms][DEBUG] check_frida: running
[2025-08-20 21:20:28][357651711392943][310 ms][DEBUG] END   check_frida in 308 ms
[2025-08-20 21:20:28][357651711392943][310 ms][DEBUG] START check_internet
[2025-08-20 21:20:28][357651711392943][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:20:29][357651711392943][810 ms][DEBUG] SU: done in 500 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.743/202.743/202.743/0.000 ms\n
[2025-08-20 21:20:29][357651711392943][810 ms][DEBUG] check_internet: online
[2025-08-20 21:20:29][357651711392943][810 ms][DEBUG] END   check_internet in 500 ms
[2025-08-20 21:20:29][357651711392943][810 ms][DEBUG] START check_scloud
[2025-08-20 21:20:29][357651711392943][810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:20:29][357651711392943][1122 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23625152 77440 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:20:29][357651711392943][1122 ms][DEBUG] targetPkg: running
[2025-08-20 21:20:29][357651711392943][1122 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-20 21:20:29][357651711392943][1122 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:20:29][357651711392943][1122 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzExMzkyOTQzIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MEEyRVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzE0In0='" -e "main()" -q"
[2025-08-20 21:20:29][357651711392943][1122 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:20:29][357651711392943][1122 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzExMzkyOTQzIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MEEyRVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzE0In0='" -e "main()" -q"
[2025-08-20 21:20:32][357651711392943][3778 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzExMzkyOTQzIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MEEyRVdUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NzE0In0="\r\n
[2025-08-20 21:20:37][357651711392943][8870 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39e87c4b-c6a3-4973-aed3-801ac58de7ac","id":"QR_39e87c4b-c6a3-4973-aed3-801ac58de7ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:20:37][357651711392943][8870 ms][DEBUG] proc_open done in 7748 ms; code=0; res.len=3152
[2025-08-20 21:20:37][357651711392943][8870 ms][DEBUG] END   runCmdUntilRes#1 in 7748 ms
[2025-08-20 21:20:37][357651711392943][8870 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:22:10][352399912524360][0 ms][INFO] === Request start ===
[2025-08-20 21:22:10][352399912524360][1 ms][DEBUG] START check_frida
[2025-08-20 21:22:10][352399912524360][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:22:10][352399912524360][310 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2262072  13288 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:22:10][352399912524360][310 ms][DEBUG] check_frida: running
[2025-08-20 21:22:10][352399912524360][310 ms][DEBUG] END   check_frida in 309 ms
[2025-08-20 21:22:10][352399912524360][310 ms][DEBUG] START check_internet
[2025-08-20 21:22:10][352399912524360][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:22:11][352399912524360][716 ms][DEBUG] SU: done in 406 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.394/201.394/201.394/0.000 ms\n
[2025-08-20 21:22:11][352399912524360][716 ms][DEBUG] check_internet: online
[2025-08-20 21:22:11][352399912524360][716 ms][DEBUG] END   check_internet in 406 ms
[2025-08-20 21:22:11][352399912524360][716 ms][DEBUG] START check_scloud
[2025-08-20 21:22:11][352399912524360][716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:22:11][352399912524360][950 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23625184 76288 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:22:11][352399912524360][950 ms][DEBUG] targetPkg: running
[2025-08-20 21:22:11][352399912524360][950 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 21:22:11][352399912524360][950 ms][DEBUG] rawBody.length=1159
[2025-08-20 21:22:11][352399912524360][950 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk5OTEyNTI0MzYwIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDIwM0FWUk4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzcyOTcifQ=='" -e "main()" -q"
[2025-08-20 21:22:11][352399912524360][950 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:22:11][352399912524360][950 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzk5OTEyNTI0MzYwIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDIwM0FWUk4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzcyOTcifQ=='" -e "main()" -q"
[2025-08-20 21:22:14][352399912524360][3606 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzk5OTEyNTI0MzYwIiwibW9kZWwiOiJTTS1YNTEwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWDIwM0FWUk4iLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzcyOTcifQ=="\r\n
[2025-08-20 21:22:17][352399912524360][7246 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1f8c23e-acae-4446-a5e4-0ff5e7675b2e","id":"QR_e1f8c23e-acae-4446-a5e4-0ff5e7675b2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:22:17][352399912524360][7246 ms][DEBUG] proc_open done in 6295 ms; code=0; res.len=3152
[2025-08-20 21:22:17][352399912524360][7246 ms][DEBUG] END   runCmdUntilRes#1 in 6296 ms
[2025-08-20 21:22:17][352399912524360][7246 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:22:39][354291422452489][0 ms][INFO] === Request start ===
[2025-08-20 21:22:39][354291422452489][0 ms][DEBUG] START check_frida
[2025-08-20 21:22:39][354291422452489][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:22:39][354291422452489][293 ms][DEBUG] SU: done in 293 ms; outroot         20950     1 2263084  13100 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:22:39][354291422452489][293 ms][DEBUG] check_frida: running
[2025-08-20 21:22:39][354291422452489][293 ms][DEBUG] END   check_frida in 293 ms
[2025-08-20 21:22:39][354291422452489][293 ms][DEBUG] START check_internet
[2025-08-20 21:22:39][354291422452489][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:22:39][354291422452489][543 ms][DEBUG] SU: done in 250 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.739/146.739/146.739/0.000 ms\n
[2025-08-20 21:22:39][354291422452489][543 ms][DEBUG] check_internet: online
[2025-08-20 21:22:39][354291422452489][543 ms][DEBUG] END   check_internet in 250 ms
[2025-08-20 21:22:39][354291422452489][543 ms][DEBUG] START check_scloud
[2025-08-20 21:22:39][354291422452489][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:22:40][354291422452489][793 ms][DEBUG] SU: done in 249 ms; outu0_a118      20979 10674 23625216 76584 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:22:40][354291422452489][793 ms][DEBUG] targetPkg: running
[2025-08-20 21:22:40][354291422452489][793 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 21:22:40][354291422452489][793 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:22:40][354291422452489][793 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjkxNDIyNDUyNDg5IiwibW9kZWwiOiJTTS1BMTI3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJCMDJNTkZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjU3In0='" -e "main()" -q"
[2025-08-20 21:22:40][354291422452489][793 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:22:40][354291422452489][793 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjkxNDIyNDUyNDg5IiwibW9kZWwiOiJTTS1BMTI3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJCMDJNTkZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjU3In0='" -e "main()" -q"
[2025-08-20 21:22:42][354291422452489][3417 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjkxNDIyNDUyNDg5IiwibW9kZWwiOiJTTS1BMTI3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFJCMDJNTkZEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MjU3In0="\r\n
[2025-08-20 21:22:46][354291422452489][6870 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58bbf974-6a74-478a-b86f-73588d1ffe79","id":"QR_58bbf974-6a74-478a-b86f-73588d1ffe79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:22:46][354291422452489][6870 ms][DEBUG] proc_open done in 6077 ms; code=0; res.len=3152
[2025-08-20 21:22:46][354291422452489][6870 ms][DEBUG] END   runCmdUntilRes#1 in 6077 ms
[2025-08-20 21:22:46][354291422452489][6870 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:23:07][352967354167698][0 ms][INFO] === Request start ===
[2025-08-20 21:23:07][352967354167698][1 ms][DEBUG] START check_frida
[2025-08-20 21:23:07][352967354167698][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:23:07][352967354167698][316 ms][DEBUG] SU: done in 315 ms; outroot         20950     1 2263084  12868 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:23:07][352967354167698][316 ms][DEBUG] check_frida: running
[2025-08-20 21:23:07][352967354167698][316 ms][DEBUG] END   check_frida in 315 ms
[2025-08-20 21:23:07][352967354167698][316 ms][DEBUG] START check_scloud
[2025-08-20 21:23:07][352967354167698][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:23:07][352967354167698][597 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625248 75960 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:23:07][352967354167698][597 ms][DEBUG] targetPkg: running
[2025-08-20 21:23:07][352967354167698][597 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:23:07][352967354167698][597 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:23:07][352967354167698][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU0MTY3Njk4IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDJDOU5QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjM2In0='" -e "main()" -q"
[2025-08-20 21:23:07][352967354167698][598 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:23:07][352967354167698][598 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzU0MTY3Njk4IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDJDOU5QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjM2In0='" -e "main()" -q"
[2025-08-20 21:23:10][352967354167698][3206 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3MzU0MTY3Njk4IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFcxMDJDOU5QIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjM2In0="\r\n
[2025-08-20 21:23:13][352967354167698][6065 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e60140d1-89c0-4470-97ad-2ba3f840c896","id":"QR_e60140d1-89c0-4470-97ad-2ba3f840c896","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:23:13][352967354167698][6065 ms][DEBUG] proc_open done in 5468 ms; code=0; res.len=3152
[2025-08-20 21:23:13][352967354167698][6065 ms][DEBUG] END   runCmdUntilRes#1 in 5468 ms
[2025-08-20 21:23:13][352967354167698][6066 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:26:09][359147526556911][1 ms][INFO] === Request start ===
[2025-08-20 21:26:09][359147526556911][2 ms][DEBUG] START check_frida
[2025-08-20 21:26:09][359147526556911][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:26:09][359147526556911][299 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2263084  12880 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:26:09][359147526556911][300 ms][DEBUG] check_frida: running
[2025-08-20 21:26:09][359147526556911][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-20 21:26:09][359147526556911][300 ms][DEBUG] START check_internet
[2025-08-20 21:26:09][359147526556911][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:26:10][359147526556911][627 ms][DEBUG] SU: done in 327 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.120/223.120/223.120/0.000 ms\n
[2025-08-20 21:26:10][359147526556911][627 ms][DEBUG] check_internet: online
[2025-08-20 21:26:10][359147526556911][627 ms][DEBUG] END   check_internet in 327 ms
[2025-08-20 21:26:10][359147526556911][627 ms][DEBUG] START check_scloud
[2025-08-20 21:26:10][359147526556911][627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:26:10][359147526556911][877 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23625280 76552 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:26:10][359147526556911][877 ms][DEBUG] targetPkg: running
[2025-08-20 21:26:10][359147526556911][877 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 21:26:10][359147526556911][877 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:26:10][359147526556911][877 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQ3NTI2NTU2OTExIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU5ZWDlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NTc4In0='" -e "main()" -q"
[2025-08-20 21:26:10][359147526556911][877 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:26:10][359147526556911][877 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MTQ3NTI2NTU2OTExIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU5ZWDlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NTc4In0='" -e "main()" -q"
[2025-08-20 21:26:13][359147526556911][3485 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MTQ3NTI2NTU2OTExIiwibW9kZWwiOiJTTS1BMjM2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c3MU5ZWDlGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkJTVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0NTc4In0="\r\n
[2025-08-20 21:26:17][359147526556911][8281 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96e39a36-8097-495c-a69c-0728a687d33f","id":"QR_96e39a36-8097-495c-a69c-0728a687d33f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:26:17][359147526556911][8281 ms][DEBUG] proc_open done in 7404 ms; code=0; res.len=3152
[2025-08-20 21:26:17][359147526556911][8281 ms][DEBUG] END   runCmdUntilRes#1 in 7404 ms
[2025-08-20 21:26:17][359147526556911][8281 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:26:26][359260924180588][0 ms][INFO] === Request start ===
[2025-08-20 21:26:26][359260924180588][1 ms][DEBUG] START check_frida
[2025-08-20 21:26:26][359260924180588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:26:26][359260924180588][312 ms][DEBUG] SU: done in 311 ms; outroot         20950     1 2279504  12820 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:26:26][359260924180588][312 ms][DEBUG] check_frida: running
[2025-08-20 21:26:26][359260924180588][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-20 21:26:26][359260924180588][312 ms][DEBUG] START check_internet
[2025-08-20 21:26:26][359260924180588][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:26:27][359260924180588][546 ms][DEBUG] SU: done in 234 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=130 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 130.505/130.505/130.505/0.000 ms\n
[2025-08-20 21:26:27][359260924180588][547 ms][DEBUG] check_internet: online
[2025-08-20 21:26:27][359260924180588][547 ms][DEBUG] END   check_internet in 234 ms
[2025-08-20 21:26:27][359260924180588][547 ms][DEBUG] START check_scloud
[2025-08-20 21:26:27][359260924180588][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:26:27][359260924180588][796 ms][DEBUG] SU: done in 249 ms; outu0_a118      20979 10674 23625312 75912 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:26:27][359260924180588][796 ms][DEBUG] targetPkg: running
[2025-08-20 21:26:27][359260924180588][796 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 21:26:27][359260924180588][796 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:26:27][359260924180588][796 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MjYwOTI0MTgwNTg4IiwibW9kZWwiOiJTTS1BNTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JCMlJWUjhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE5NCJ9'" -e "main()" -q"
[2025-08-20 21:26:27][359260924180588][796 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:26:27][359260924180588][796 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU5MjYwOTI0MTgwNTg4IiwibW9kZWwiOiJTTS1BNTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JCMlJWUjhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE5NCJ9'" -e "main()" -q"
[2025-08-20 21:26:29][359260924180588][3389 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU5MjYwOTI0MTgwNTg4IiwibW9kZWwiOiJTTS1BNTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1JCMlJWUjhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjE5NCJ9"\r\n
[2025-08-20 21:26:32][359260924180588][5858 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_31f8d20d-c383-4a97-8d65-fb96e2ccb52a","id":"QR_31f8d20d-c383-4a97-8d65-fb96e2ccb52a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:26:32][359260924180588][5858 ms][DEBUG] proc_open done in 5062 ms; code=0; res.len=3152
[2025-08-20 21:26:32][359260924180588][5858 ms][DEBUG] END   runCmdUntilRes#1 in 5062 ms
[2025-08-20 21:26:32][359260924180588][5858 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:27:20][355181111680087][0 ms][INFO] === Request start ===
[2025-08-20 21:27:20][355181111680087][1 ms][DEBUG] START check_frida
[2025-08-20 21:27:20][355181111680087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:27:21][355181111680087][255 ms][DEBUG] SU: done in 254 ms; outroot         20950     1 2263084  12792 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:27:21][355181111680087][255 ms][DEBUG] check_frida: running
[2025-08-20 21:27:21][355181111680087][255 ms][DEBUG] END   check_frida in 254 ms
[2025-08-20 21:27:21][355181111680087][255 ms][DEBUG] START check_scloud
[2025-08-20 21:27:21][355181111680087][255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:27:21][355181111680087][567 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23625344 76492 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:27:21][355181111680087][567 ms][DEBUG] targetPkg: running
[2025-08-20 21:27:21][355181111680087][567 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-20 21:27:21][355181111680087][567 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:27:21][355181111680087][567 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTgxMTExNjgwMDg3IiwibW9kZWwiOiJTTS1BNzE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q043MFJBQjNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDk4In0='" -e "main()" -q"
[2025-08-20 21:27:21][355181111680087][567 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:27:21][355181111680087][567 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTgxMTExNjgwMDg3IiwibW9kZWwiOiJTTS1BNzE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q043MFJBQjNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDk4In0='" -e "main()" -q"
[2025-08-20 21:27:24][355181111680087][3192 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTgxMTExNjgwMDg3IiwibW9kZWwiOiJTTS1BNzE2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q043MFJBQjNSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRNQiIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDk4In0="\r\n
[2025-08-20 21:27:31][355181111680087][10677 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4620d16-ea23-494e-9111-01cf44152fe6","id":"QR_a4620d16-ea23-494e-9111-01cf44152fe6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:27:31][355181111680087][10677 ms][DEBUG] proc_open done in 10110 ms; code=0; res.len=3152
[2025-08-20 21:27:31][355181111680087][10677 ms][DEBUG] END   runCmdUntilRes#1 in 10110 ms
[2025-08-20 21:27:31][355181111680087][10677 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:29:08][350616259116118][1 ms][INFO] === Request start ===
[2025-08-20 21:29:08][350616259116118][2 ms][DEBUG] START check_frida
[2025-08-20 21:29:08][350616259116118][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:29:08][350616259116118][254 ms][DEBUG] SU: done in 252 ms; outroot         20950     1 2263084  12800 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:29:08][350616259116118][254 ms][DEBUG] check_frida: running
[2025-08-20 21:29:08][350616259116118][254 ms][DEBUG] END   check_frida in 253 ms
[2025-08-20 21:29:08][350616259116118][254 ms][DEBUG] START check_scloud
[2025-08-20 21:29:08][350616259116118][254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:29:08][350616259116118][550 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23625376 76280 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:29:08][350616259116118][550 ms][DEBUG] targetPkg: running
[2025-08-20 21:29:08][350616259116118][551 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-20 21:29:08][350616259116118][551 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:29:08][350616259116118][551 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU5MTE2MTE4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNVc4MDBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTY0In0='" -e "main()" -q"
[2025-08-20 21:29:08][350616259116118][551 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:29:08][350616259116118][551 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU5MTE2MTE4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNVc4MDBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTY0In0='" -e "main()" -q"
[2025-08-20 21:29:11][350616259116118][3159 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjE2MjU5MTE2MTE4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxNVc4MDBMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2NTY0In0="\r\n
[2025-08-20 21:29:14][350616259116118][6269 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63f1a0fd-545b-4b06-a082-965991ad4f93","id":"QR_63f1a0fd-545b-4b06-a082-965991ad4f93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:29:14][350616259116118][6269 ms][DEBUG] proc_open done in 5718 ms; code=0; res.len=3152
[2025-08-20 21:29:14][350616259116118][6269 ms][DEBUG] END   runCmdUntilRes#1 in 5718 ms
[2025-08-20 21:29:14][350616259116118][6269 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:30:07][356908781366095][1 ms][INFO] === Request start ===
[2025-08-20 21:30:07][356908781366095][1 ms][DEBUG] START check_frida
[2025-08-20 21:30:07][356908781366095][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:30:08][356908781366095][294 ms][DEBUG] SU: done in 293 ms; outroot         20950     1 2263084  12848 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:30:08][356908781366095][294 ms][DEBUG] check_frida: running
[2025-08-20 21:30:08][356908781366095][295 ms][DEBUG] END   check_frida in 293 ms
[2025-08-20 21:30:08][356908781366095][295 ms][DEBUG] START check_internet
[2025-08-20 21:30:08][356908781366095][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:30:08][356908781366095][826 ms][DEBUG] SU: done in 531 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.428/202.428/202.428/0.000 ms\n
[2025-08-20 21:30:08][356908781366095][826 ms][DEBUG] check_internet: online
[2025-08-20 21:30:08][356908781366095][826 ms][DEBUG] END   check_internet in 532 ms
[2025-08-20 21:30:08][356908781366095][826 ms][DEBUG] START check_scloud
[2025-08-20 21:30:08][356908781366095][826 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:30:08][356908781366095][1091 ms][DEBUG] SU: done in 265 ms; outu0_a118      20979 10674 23625408 76776 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:30:08][356908781366095][1091 ms][DEBUG] targetPkg: running
[2025-08-20 21:30:08][356908781366095][1091 ms][DEBUG] END   check_scloud in 265 ms
[2025-08-20 21:30:08][356908781366095][1091 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:30:08][356908781366095][1091 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTA4NzgxMzY2MDk1IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMUZWQ0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcwNSJ9'" -e "main()" -q"
[2025-08-20 21:30:08][356908781366095][1091 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:30:08][356908781366095][1091 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTA4NzgxMzY2MDk1IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMUZWQ0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcwNSJ9'" -e "main()" -q"
[2025-08-20 21:30:11][356908781366095][3716 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTA4NzgxMzY2MDk1IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1cxMUZWQ0ROIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODcwNSJ9"\r\n
[2025-08-20 21:30:13][356908781366095][6060 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65a37878-972e-40e6-ae29-b31c4fc35eba","id":"QR_65a37878-972e-40e6-ae29-b31c4fc35eba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:30:13][356908781366095][6060 ms][DEBUG] proc_open done in 4969 ms; code=0; res.len=3152
[2025-08-20 21:30:13][356908781366095][6060 ms][DEBUG] END   runCmdUntilRes#1 in 4969 ms
[2025-08-20 21:30:13][356908781366095][6060 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:30:43][350274358375886][0 ms][INFO] === Request start ===
[2025-08-20 21:30:43][350274358375886][1 ms][DEBUG] START check_frida
[2025-08-20 21:30:43][350274358375886][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:30:43][350274358375886][254 ms][DEBUG] SU: done in 252 ms; outroot         20950     1 2263084  12828 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:30:43][350274358375886][254 ms][DEBUG] check_frida: running
[2025-08-20 21:30:43][350274358375886][254 ms][DEBUG] END   check_frida in 253 ms
[2025-08-20 21:30:43][350274358375886][254 ms][DEBUG] START check_internet
[2025-08-20 21:30:43][350274358375886][254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:30:44][350274358375886][550 ms][DEBUG] SU: done in 296 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=161 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 161.249/161.249/161.249/0.000 ms\n
[2025-08-20 21:30:44][350274358375886][551 ms][DEBUG] check_internet: online
[2025-08-20 21:30:44][350274358375886][551 ms][DEBUG] END   check_internet in 297 ms
[2025-08-20 21:30:44][350274358375886][551 ms][DEBUG] START check_scloud
[2025-08-20 21:30:44][350274358375886][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:30:44][350274358375886][832 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625440 76012 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:30:44][350274358375886][832 ms][DEBUG] targetPkg: running
[2025-08-20 21:30:44][350274358375886][832 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:30:44][350274358375886][832 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:30:44][350274358375886][832 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU4Mzc1ODg2IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMFA1RDlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTU5In0='" -e "main()" -q"
[2025-08-20 21:30:44][350274358375886][832 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:30:44][350274358375886][832 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMjc0MzU4Mzc1ODg2IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMFA1RDlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTU5In0='" -e "main()" -q"
[2025-08-20 21:30:47][350274358375886][3394 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMjc0MzU4Mzc1ODg2IiwibW9kZWwiOiJTTS1BMjI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQxMFA1RDlLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2OTU5In0="\r\n
[2025-08-20 21:30:50][350274358375886][6879 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49c11048-4ce9-4a34-ac4d-a77d31871f51","id":"QR_49c11048-4ce9-4a34-ac4d-a77d31871f51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:30:50][350274358375886][6879 ms][DEBUG] proc_open done in 6047 ms; code=0; res.len=3152
[2025-08-20 21:30:50][350274358375886][6879 ms][DEBUG] END   runCmdUntilRes#1 in 6047 ms
[2025-08-20 21:30:50][350274358375886][6879 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:35:03][352502211666721][1 ms][INFO] === Request start ===
[2025-08-20 21:35:03][352502211666721][2 ms][DEBUG] START check_frida
[2025-08-20 21:35:03][352502211666721][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:35:03][352502211666721][301 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2264096   9200 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:35:03][352502211666721][301 ms][DEBUG] check_frida: running
[2025-08-20 21:35:03][352502211666721][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-20 21:35:03][352502211666721][302 ms][DEBUG] START check_scloud
[2025-08-20 21:35:03][352502211666721][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:35:03][352502211666721][599 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23625472 75604 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:35:03][352502211666721][599 ms][DEBUG] targetPkg: running
[2025-08-20 21:35:03][352502211666721][599 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:35:03][352502211666721][599 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:35:03][352502211666721][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAyMjExNjY2NzIxIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MThSWUNUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEyNyJ9'" -e "main()" -q"
[2025-08-20 21:35:03][352502211666721][599 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:35:03][352502211666721][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNTAyMjExNjY2NzIxIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MThSWUNUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEyNyJ9'" -e "main()" -q"
[2025-08-20 21:35:06][352502211666721][3239 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNTAyMjExNjY2NzIxIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q0MThSWUNUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEyNyJ9"\r\n
[2025-08-20 21:35:08][352502211666721][5270 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_263288e8-ea1f-4b90-9bf8-9b87ee0ad3e4","id":"QR_263288e8-ea1f-4b90-9bf8-9b87ee0ad3e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:35:08][352502211666721][5270 ms][DEBUG] proc_open done in 4671 ms; code=0; res.len=3152
[2025-08-20 21:35:08][352502211666721][5270 ms][DEBUG] END   runCmdUntilRes#1 in 4671 ms
[2025-08-20 21:35:08][352502211666721][5270 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:35:56][350146811323465][0 ms][INFO] === Request start ===
[2025-08-20 21:35:56][350146811323465][1 ms][DEBUG] START check_frida
[2025-08-20 21:35:56][350146811323465][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:35:56][350146811323465][306 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2263084   9300 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:35:56][350146811323465][306 ms][DEBUG] check_frida: running
[2025-08-20 21:35:56][350146811323465][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-20 21:35:56][350146811323465][306 ms][DEBUG] START check_scloud
[2025-08-20 21:35:56][350146811323465][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:35:56][350146811323465][587 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625504 75208 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:35:56][350146811323465][587 ms][DEBUG] targetPkg: running
[2025-08-20 21:35:56][350146811323465][587 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:35:56][350146811323465][587 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:35:56][350146811323465][587 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQ2ODExMzIzNDY1IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q0MDVWNENXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM5MiJ9'" -e "main()" -q"
[2025-08-20 21:35:56][350146811323465][587 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:35:56][350146811323465][587 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTQ2ODExMzIzNDY1IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q0MDVWNENXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM5MiJ9'" -e "main()" -q"
[2025-08-20 21:35:59][350146811323465][3212 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTQ2ODExMzIzNDY1IiwibW9kZWwiOiJTTS1TOTA4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1Q0MDVWNENXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTM5MiJ9"\r\n
[2025-08-20 21:36:01][350146811323465][5181 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cebed51e-1692-484e-9a41-282abc09d293","id":"QR_cebed51e-1692-484e-9a41-282abc09d293","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:36:01][350146811323465][5182 ms][DEBUG] proc_open done in 4595 ms; code=0; res.len=3152
[2025-08-20 21:36:01][350146811323465][5182 ms][DEBUG] END   runCmdUntilRes#1 in 4595 ms
[2025-08-20 21:36:01][350146811323465][5182 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:37:06][353948921886514][0 ms][INFO] === Request start ===
[2025-08-20 21:37:06][353948921886514][0 ms][DEBUG] START check_frida
[2025-08-20 21:37:06][353948921886514][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:37:07][353948921886514][300 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2263084   9336 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:37:07][353948921886514][300 ms][DEBUG] check_frida: running
[2025-08-20 21:37:07][353948921886514][300 ms][DEBUG] END   check_frida in 300 ms
[2025-08-20 21:37:07][353948921886514][300 ms][DEBUG] START check_scloud
[2025-08-20 21:37:07][353948921886514][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:37:07][353948921886514][597 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23625536 75760 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:37:07][353948921886514][597 ms][DEBUG] targetPkg: running
[2025-08-20 21:37:07][353948921886514][597 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:37:07][353948921886514][597 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:37:07][353948921886514][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTQ4OTIxODg2NTE0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjA0RDJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU3In0='" -e "main()" -q"
[2025-08-20 21:37:07][353948921886514][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:37:07][353948921886514][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTQ4OTIxODg2NTE0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjA0RDJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU3In0='" -e "main()" -q"
[2025-08-20 21:37:10][353948921886514][3206 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTQ4OTIxODg2NTE0IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MjA0RDJSIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxURyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU3In0="\r\n
[2025-08-20 21:37:14][353948921886514][7675 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0e56d6e-b082-4003-a5cc-bf40a24d4115","id":"QR_c0e56d6e-b082-4003-a5cc-bf40a24d4115","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:37:14][353948921886514][7676 ms][DEBUG] proc_open done in 7079 ms; code=0; res.len=3152
[2025-08-20 21:37:14][353948921886514][7676 ms][DEBUG] END   runCmdUntilRes#1 in 7079 ms
[2025-08-20 21:37:14][353948921886514][7676 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:38:29][352375455461368][1 ms][INFO] === Request start ===
[2025-08-20 21:38:29][352375455461368][2 ms][DEBUG] START check_frida
[2025-08-20 21:38:29][352375455461368][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:38:30][352375455461368][297 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2263084   9340 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:38:30][352375455461368][297 ms][DEBUG] check_frida: running
[2025-08-20 21:38:30][352375455461368][297 ms][DEBUG] END   check_frida in 295 ms
[2025-08-20 21:38:30][352375455461368][297 ms][DEBUG] START check_internet
[2025-08-20 21:38:30][352375455461368][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:38:30][352375455461368][781 ms][DEBUG] SU: done in 484 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.408/201.408/201.408/0.000 ms\n
[2025-08-20 21:38:30][352375455461368][781 ms][DEBUG] check_internet: online
[2025-08-20 21:38:30][352375455461368][781 ms][DEBUG] END   check_internet in 484 ms
[2025-08-20 21:38:30][352375455461368][781 ms][DEBUG] START check_scloud
[2025-08-20 21:38:30][352375455461368][781 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:38:30][352375455461368][1062 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625568 74832 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:38:30][352375455461368][1062 ms][DEBUG] targetPkg: running
[2025-08-20 21:38:30][352375455461368][1062 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:38:30][352375455461368][1062 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:38:30][352375455461368][1062 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU1NDYxMzY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MEo4TEhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQ4MCJ9'" -e "main()" -q"
[2025-08-20 21:38:30][352375455461368][1062 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:38:30][352375455461368][1062 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMzc1NDU1NDYxMzY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MEo4TEhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQ4MCJ9'" -e "main()" -q"
[2025-08-20 21:38:33][352375455461368][3687 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMzc1NDU1NDYxMzY4IiwibW9kZWwiOiJTTS1BNTQ2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1c3MEo4TEhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzQ4MCJ9"\r\n
[2025-08-20 21:38:35][352375455461368][5906 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3b6eaca-f215-40c7-9d08-d14886c749af","id":"QR_c3b6eaca-f215-40c7-9d08-d14886c749af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:38:35][352375455461368][5906 ms][DEBUG] proc_open done in 4844 ms; code=0; res.len=3152
[2025-08-20 21:38:35][352375455461368][5906 ms][DEBUG] END   runCmdUntilRes#1 in 4844 ms
[2025-08-20 21:38:35][352375455461368][5906 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:39:33][352789381523259][0 ms][INFO] === Request start ===
[2025-08-20 21:39:33][352789381523259][1 ms][DEBUG] START check_frida
[2025-08-20 21:39:33][352789381523259][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:39:33][352789381523259][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   8708 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:39:33][352789381523259][309 ms][DEBUG] check_frida: running
[2025-08-20 21:39:33][352789381523259][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-20 21:39:33][352789381523259][309 ms][DEBUG] START check_scloud
[2025-08-20 21:39:33][352789381523259][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:39:33][352789381523259][606 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23625600 74972 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:39:33][352789381523259][606 ms][DEBUG] targetPkg: running
[2025-08-20 21:39:33][352789381523259][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:39:33][352789381523259][606 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:39:33][352789381523259][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzg5MzgxNTIzMjU5IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMTY5NEhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NCJ9'" -e "main()" -q"
[2025-08-20 21:39:33][352789381523259][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:39:33][352789381523259][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNzg5MzgxNTIzMjU5IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMTY5NEhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NCJ9'" -e "main()" -q"
[2025-08-20 21:39:36][352789381523259][3231 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNzg5MzgxNTIzMjU5IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1cyMTY5NEhOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjM5NCJ9"\r\n
[2025-08-20 21:39:38][352789381523259][5560 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_729b8040-8338-4e31-8fee-71de6e3277e5","id":"QR_729b8040-8338-4e31-8fee-71de6e3277e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:39:38][352789381523259][5560 ms][DEBUG] proc_open done in 4954 ms; code=0; res.len=3152
[2025-08-20 21:39:38][352789381523259][5560 ms][DEBUG] END   runCmdUntilRes#1 in 4954 ms
[2025-08-20 21:39:38][352789381523259][5560 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:40:07][353684142793987][0 ms][INFO] === Request start ===
[2025-08-20 21:40:07][353684142793987][0 ms][DEBUG] START check_frida
[2025-08-20 21:40:07][353684142793987][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:40:08][353684142793987][307 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084   8788 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:40:08][353684142793987][307 ms][DEBUG] check_frida: running
[2025-08-20 21:40:08][353684142793987][307 ms][DEBUG] END   check_frida in 307 ms
[2025-08-20 21:40:08][353684142793987][307 ms][DEBUG] START check_internet
[2025-08-20 21:40:08][353684142793987][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:40:08][353684142793987][588 ms][DEBUG] SU: done in 280 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.207/184.207/184.207/0.000 ms\n
[2025-08-20 21:40:08][353684142793987][588 ms][DEBUG] check_internet: online
[2025-08-20 21:40:08][353684142793987][588 ms][DEBUG] END   check_internet in 281 ms
[2025-08-20 21:40:08][353684142793987][588 ms][DEBUG] START check_scloud
[2025-08-20 21:40:08][353684142793987][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:40:08][353684142793987][869 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625632 74616 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:40:08][353684142793987][869 ms][DEBUG] targetPkg: running
[2025-08-20 21:40:08][353684142793987][869 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:40:08][353684142793987][869 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:40:08][353684142793987][869 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQyNzkzOTg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MEpZMzVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQxNyJ9'" -e "main()" -q"
[2025-08-20 21:40:08][353684142793987][869 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:40:08][353684142793987][869 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNjg0MTQyNzkzOTg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MEpZMzVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQxNyJ9'" -e "main()" -q"
[2025-08-20 21:40:11][353684142793987][3494 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNjg0MTQyNzkzOTg3IiwibW9kZWwiOiJTTS1BMTY1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MEpZMzVNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQxNyJ9"\r\n
[2025-08-20 21:40:13][353684142793987][5322 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ce2d2f0-758e-4a62-93b4-152d029f5643","id":"QR_2ce2d2f0-758e-4a62-93b4-152d029f5643","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:40:13][353684142793987][5322 ms][DEBUG] proc_open done in 4453 ms; code=0; res.len=3152
[2025-08-20 21:40:13][353684142793987][5322 ms][DEBUG] END   runCmdUntilRes#1 in 4453 ms
[2025-08-20 21:40:13][353684142793987][5322 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:47:23][356927264589692][1 ms][INFO] === Request start ===
[2025-08-20 21:47:23][356927264589692][2 ms][DEBUG] START check_frida
[2025-08-20 21:47:23][356927264589692][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:47:23][356927264589692][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2262072   8720 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:47:23][356927264589692][301 ms][DEBUG] check_frida: running
[2025-08-20 21:47:23][356927264589692][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-20 21:47:23][356927264589692][301 ms][DEBUG] START check_scloud
[2025-08-20 21:47:23][356927264589692][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:47:24][356927264589692][535 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23608180 75480 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:47:24][356927264589692][535 ms][DEBUG] targetPkg: running
[2025-08-20 21:47:24][356927264589692][535 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 21:47:24][356927264589692][535 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:47:24][356927264589692][536 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI3MjY0NTg5NjkyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MEY1WlNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjM3In0='" -e "main()" -q"
[2025-08-20 21:47:24][356927264589692][536 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:47:24][356927264589692][536 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI3MjY0NTg5NjkyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MEY1WlNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjM3In0='" -e "main()" -q"
[2025-08-20 21:47:26][356927264589692][3176 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTI3MjY0NTg5NjkyIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk2MEY1WlNGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjM3In0="\r\n
[2025-08-20 21:47:30][356927264589692][6457 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_159480bb-9c93-494a-9325-dc7a23d1d8e3","id":"QR_159480bb-9c93-494a-9325-dc7a23d1d8e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:47:30][356927264589692][6458 ms][DEBUG] proc_open done in 5922 ms; code=0; res.len=3152
[2025-08-20 21:47:30][356927264589692][6458 ms][DEBUG] END   runCmdUntilRes#1 in 5922 ms
[2025-08-20 21:47:30][356927264589692][6458 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:48:10][353248115565952][0 ms][INFO] === Request start ===
[2025-08-20 21:48:10][353248115565952][1 ms][DEBUG] START check_frida
[2025-08-20 21:48:10][353248115565952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:48:10][353248115565952][317 ms][DEBUG] SU: done in 316 ms; outroot         20950     1 2263084   8156 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:48:10][353248115565952][317 ms][DEBUG] check_frida: running
[2025-08-20 21:48:10][353248115565952][317 ms][DEBUG] END   check_frida in 316 ms
[2025-08-20 21:48:10][353248115565952][317 ms][DEBUG] START check_internet
[2025-08-20 21:48:10][353248115565952][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:48:10][353248115565952][770 ms][DEBUG] SU: done in 453 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.762/202.762/202.762/0.000 ms\n
[2025-08-20 21:48:10][353248115565952][770 ms][DEBUG] check_internet: online
[2025-08-20 21:48:10][353248115565952][770 ms][DEBUG] END   check_internet in 453 ms
[2025-08-20 21:48:10][353248115565952][770 ms][DEBUG] START check_scloud
[2025-08-20 21:48:10][353248115565952][770 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:48:11][353248115565952][1052 ms][DEBUG] SU: done in 282 ms; outu0_a118      20979 10674 23625696 73788 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:48:11][353248115565952][1052 ms][DEBUG] targetPkg: running
[2025-08-20 21:48:11][353248115565952][1052 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-20 21:48:11][353248115565952][1052 ms][DEBUG] rawBody.length=1159
[2025-08-20 21:48:11][353248115565952][1052 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ4MTE1NTY1OTUyIiwibW9kZWwiOiJTTS1YNTIwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTUwN1ZEUEwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzU5OTUifQ=='" -e "main()" -q"
[2025-08-20 21:48:11][353248115565952][1052 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:48:11][353248115565952][1052 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ4MTE1NTY1OTUyIiwibW9kZWwiOiJTTS1YNTIwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTUwN1ZEUEwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzU5OTUifQ=='" -e "main()" -q"
[2025-08-20 21:48:13][353248115565952][3661 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjQ4MTE1NTY1OTUyIiwibW9kZWwiOiJTTS1YNTIwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTUwN1ZEUEwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzU5OTUifQ=="\r\n
[2025-08-20 21:48:19][353248115565952][9255 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc907d05-35ba-438b-a1ac-064f875a6704","id":"QR_cc907d05-35ba-438b-a1ac-064f875a6704","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:48:19][353248115565952][9255 ms][DEBUG] proc_open done in 8202 ms; code=0; res.len=3152
[2025-08-20 21:48:19][353248115565952][9255 ms][DEBUG] END   runCmdUntilRes#1 in 8203 ms
[2025-08-20 21:48:19][353248115565952][9255 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:49:01][358453420273053][0 ms][INFO] === Request start ===
[2025-08-20 21:49:01][358453420273053][0 ms][DEBUG] START check_frida
[2025-08-20 21:49:01][358453420273053][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:49:01][358453420273053][305 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2263084   7748 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:49:01][358453420273053][305 ms][DEBUG] check_frida: running
[2025-08-20 21:49:01][358453420273053][305 ms][DEBUG] END   check_frida in 305 ms
[2025-08-20 21:49:01][358453420273053][305 ms][DEBUG] START check_scloud
[2025-08-20 21:49:01][358453420273053][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:49:01][358453420273053][602 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23625728 74400 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:49:01][358453420273053][602 ms][DEBUG] targetPkg: running
[2025-08-20 21:49:01][358453420273053][602 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:49:01][358453420273053][602 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:49:01][358453420273053][602 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDUzNDIwMjczMDUzIiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MFJRMUxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI1MCJ9'" -e "main()" -q"
[2025-08-20 21:49:01][358453420273053][602 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:49:01][358453420273053][602 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NDUzNDIwMjczMDUzIiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MFJRMUxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI1MCJ9'" -e "main()" -q"
[2025-08-20 21:49:04][358453420273053][3258 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NDUzNDIwMjczMDUzIiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1Q4MFJRMUxBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI1MCJ9"\r\n
[2025-08-20 21:49:06][358453420273053][5242 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c994e08a-80fd-4632-9579-b44bbe26f697","id":"QR_c994e08a-80fd-4632-9579-b44bbe26f697","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:49:06][358453420273053][5243 ms][DEBUG] proc_open done in 4640 ms; code=0; res.len=3152
[2025-08-20 21:49:06][358453420273053][5243 ms][DEBUG] END   runCmdUntilRes#1 in 4640 ms
[2025-08-20 21:49:06][358453420273053][5243 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:49:09][353357978806088][0 ms][INFO] === Request start ===
[2025-08-20 21:49:09][353357978806088][1 ms][DEBUG] START check_frida
[2025-08-20 21:49:09][353357978806088][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:49:09][353357978806088][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2279504   7700 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:49:09][353357978806088][296 ms][DEBUG] check_frida: running
[2025-08-20 21:49:09][353357978806088][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-20 21:49:09][353357978806088][296 ms][DEBUG] START check_scloud
[2025-08-20 21:49:09][353357978806088][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:49:09][353357978806088][592 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23625760 74184 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:49:09][353357978806088][593 ms][DEBUG] targetPkg: running
[2025-08-20 21:49:09][353357978806088][593 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 21:49:09][353357978806088][593 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:49:09][353357978806088][593 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTc4ODA2MDg4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEIxNjRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NTk4In0='" -e "main()" -q"
[2025-08-20 21:49:09][353357978806088][593 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:49:09][353357978806088][593 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMzU3OTc4ODA2MDg4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEIxNjRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NTk4In0='" -e "main()" -q"
[2025-08-20 21:49:12][353357978806088][3186 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMzU3OTc4ODA2MDg4IiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFkyMEIxNjRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NTk4In0="\r\n
[2025-08-20 21:49:16][353357978806088][7749 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b90673c-9824-43a4-9097-16eb28193fb7","id":"QR_8b90673c-9824-43a4-9097-16eb28193fb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:49:16][353357978806088][7749 ms][DEBUG] proc_open done in 7156 ms; code=0; res.len=3152
[2025-08-20 21:49:16][353357978806088][7749 ms][DEBUG] END   runCmdUntilRes#1 in 7156 ms
[2025-08-20 21:49:16][353357978806088][7749 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:52:11][350551931748113][1 ms][INFO] === Request start ===
[2025-08-20 21:52:11][350551931748113][2 ms][DEBUG] START check_frida
[2025-08-20 21:52:11][350551931748113][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:52:11][350551931748113][310 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2262072   7756 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:52:11][350551931748113][310 ms][DEBUG] check_frida: running
[2025-08-20 21:52:11][350551931748113][310 ms][DEBUG] END   check_frida in 308 ms
[2025-08-20 21:52:11][350551931748113][310 ms][DEBUG] START check_internet
[2025-08-20 21:52:11][350551931748113][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:52:11][350551931748113][763 ms][DEBUG] SU: done in 453 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.797/202.797/202.797/0.000 ms\n
[2025-08-20 21:52:11][350551931748113][763 ms][DEBUG] check_internet: online
[2025-08-20 21:52:11][350551931748113][763 ms][DEBUG] END   check_internet in 453 ms
[2025-08-20 21:52:11][350551931748113][763 ms][DEBUG] START check_scloud
[2025-08-20 21:52:11][350551931748113][763 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:52:12][350551931748113][1044 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625792 74600 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:52:12][350551931748113][1045 ms][DEBUG] targetPkg: running
[2025-08-20 21:52:12][350551931748113][1045 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:52:12][350551931748113][1045 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:52:12][350551931748113][1045 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMxNzQ4MTEzIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDEyUzZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjY0In0='" -e "main()" -q"
[2025-08-20 21:52:12][350551931748113][1045 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:52:12][350551931748113][1045 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNTUxOTMxNzQ4MTEzIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDEyUzZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjY0In0='" -e "main()" -q"
[2025-08-20 21:52:14][350551931748113][3701 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNTUxOTMxNzQ4MTEzIiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFk1MDEyUzZGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNjY0In0="\r\n
[2025-08-20 21:52:18][350551931748113][7185 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dcfc6b4-a569-48b5-b9b9-94ac0540d7c5","id":"QR_6dcfc6b4-a569-48b5-b9b9-94ac0540d7c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:52:18][350551931748113][7185 ms][DEBUG] proc_open done in 6140 ms; code=0; res.len=3152
[2025-08-20 21:52:18][350551931748113][7185 ms][DEBUG] END   runCmdUntilRes#1 in 6140 ms
[2025-08-20 21:52:18][350551931748113][7185 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:52:28][352967352565570][0 ms][INFO] === Request start ===
[2025-08-20 21:52:28][352967352565570][1 ms][DEBUG] START check_frida
[2025-08-20 21:52:28][352967352565570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:52:29][352967352565570][300 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2279504   7660 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:52:29][352967352565570][300 ms][DEBUG] check_frida: running
[2025-08-20 21:52:29][352967352565570][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-20 21:52:29][352967352565570][300 ms][DEBUG] START check_internet
[2025-08-20 21:52:29][352967352565570][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:52:29][352967352565570][595 ms][DEBUG] SU: done in 295 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.200/184.200/184.200/0.000 ms\n
[2025-08-20 21:52:29][352967352565570][595 ms][DEBUG] check_internet: online
[2025-08-20 21:52:29][352967352565570][595 ms][DEBUG] END   check_internet in 295 ms
[2025-08-20 21:52:29][352967352565570][595 ms][DEBUG] START check_scloud
[2025-08-20 21:52:29][352967352565570][595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:52:29][352967352565570][846 ms][DEBUG] SU: done in 251 ms; outu0_a118      20979 10674 23625824 73428 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:52:29][352967352565570][846 ms][DEBUG] targetPkg: running
[2025-08-20 21:52:29][352967352565570][846 ms][DEBUG] END   check_scloud in 251 ms
[2025-08-20 21:52:29][352967352565570][846 ms][DEBUG] rawBody.length=1160
[2025-08-20 21:52:29][352967352565570][846 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzUyNTY1NTcwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRCMDhCNTJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDgzIn0='" -e "main()" -q"
[2025-08-20 21:52:29][352967352565570][847 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:52:29][352967352565570][847 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyOTY3MzUyNTY1NTcwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRCMDhCNTJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDgzIn0='" -e "main()" -q"
[2025-08-20 21:52:32][352967352565570][3454 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyOTY3MzUyNTY1NTcwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFRCMDhCNTJBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDgzIn0="\r\n
[2025-08-20 21:52:37][352967352565570][8345 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5d0d496-02c0-45a2-90a6-4789d3e69a7b","id":"QR_e5d0d496-02c0-45a2-90a6-4789d3e69a7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:52:37][352967352565570][8345 ms][DEBUG] proc_open done in 7498 ms; code=0; res.len=3152
[2025-08-20 21:52:37][352967352565570][8345 ms][DEBUG] END   runCmdUntilRes#1 in 7499 ms
[2025-08-20 21:52:37][352967352565570][8345 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:55:07][352842930429492][1 ms][INFO] === Request start ===
[2025-08-20 21:55:07][352842930429492][2 ms][DEBUG] START check_frida
[2025-08-20 21:55:07][352842930429492][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:55:07][352842930429492][300 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2263084   7668 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:55:07][352842930429492][300 ms][DEBUG] check_frida: running
[2025-08-20 21:55:07][352842930429492][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-20 21:55:07][352842930429492][300 ms][DEBUG] START check_scloud
[2025-08-20 21:55:07][352842930429492][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:55:08][352842930429492][582 ms][DEBUG] SU: done in 282 ms; outu0_a118      20979 10674 23625856 74924 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:55:08][352842930429492][582 ms][DEBUG] targetPkg: running
[2025-08-20 21:55:08][352842930429492][582 ms][DEBUG] END   check_scloud in 282 ms
[2025-08-20 21:55:08][352842930429492][582 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:55:08][352842930429492][582 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODQyOTMwNDI5NDkyIiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MFFQQlBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI5MSJ9'" -e "main()" -q"
[2025-08-20 21:55:08][352842930429492][582 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:55:08][352842930429492][582 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyODQyOTMwNDI5NDkyIiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MFFQQlBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI5MSJ9'" -e "main()" -q"
[2025-08-20 21:55:10][352842930429492][3222 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyODQyOTMwNDI5NDkyIiwibW9kZWwiOiJTTS1BMzU2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MFFQQlBOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjI5MSJ9"\r\n
[2025-08-20 21:55:12][352842930429492][5238 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28f393a7-63a8-421b-a982-f6668a8cbb5a","id":"QR_28f393a7-63a8-421b-a982-f6668a8cbb5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:55:12][352842930429492][5238 ms][DEBUG] proc_open done in 4656 ms; code=0; res.len=3152
[2025-08-20 21:55:12][352842930429492][5239 ms][DEBUG] END   runCmdUntilRes#1 in 4656 ms
[2025-08-20 21:55:12][352842930429492][5239 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:56:06][358680101721881][0 ms][INFO] === Request start ===
[2025-08-20 21:56:06][358680101721881][0 ms][DEBUG] START check_frida
[2025-08-20 21:56:06][358680101721881][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:56:07][358680101721881][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2263084   7632 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:56:07][358680101721881][311 ms][DEBUG] check_frida: running
[2025-08-20 21:56:07][358680101721881][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-20 21:56:07][358680101721881][311 ms][DEBUG] START check_internet
[2025-08-20 21:56:07][358680101721881][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 21:56:07][358680101721881][639 ms][DEBUG] SU: done in 328 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.216/228.216/228.216/0.000 ms\n
[2025-08-20 21:56:07][358680101721881][639 ms][DEBUG] check_internet: online
[2025-08-20 21:56:07][358680101721881][639 ms][DEBUG] END   check_internet in 328 ms
[2025-08-20 21:56:07][358680101721881][639 ms][DEBUG] START check_scloud
[2025-08-20 21:56:07][358680101721881][639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:56:07][358680101721881][873 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23625888 74128 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:56:07][358680101721881][873 ms][DEBUG] targetPkg: running
[2025-08-20 21:56:07][358680101721881][873 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 21:56:07][358680101721881][873 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:56:07][358680101721881][873 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjgwMTAxNzIxODgxIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4xMzE0TUVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVVQiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg3NSJ9'" -e "main()" -q"
[2025-08-20 21:56:07][358680101721881][873 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:56:07][358680101721881][873 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4NjgwMTAxNzIxODgxIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4xMzE0TUVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVVQiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg3NSJ9'" -e "main()" -q"
[2025-08-20 21:56:10][358680101721881][3498 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4NjgwMTAxNzIxODgxIiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE4xMzE0TUVBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVVQiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNTg3NSJ9"\r\n
[2025-08-20 21:56:12][358680101721881][5670 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_766da17a-1006-4a12-b5cc-e4f84be678d9","id":"QR_766da17a-1006-4a12-b5cc-e4f84be678d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:56:12][358680101721881][5670 ms][DEBUG] proc_open done in 4797 ms; code=0; res.len=3152
[2025-08-20 21:56:12][358680101721881][5670 ms][DEBUG] END   runCmdUntilRes#1 in 4797 ms
[2025-08-20 21:56:12][358680101721881][5670 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 21:59:10][355180460849889][0 ms][INFO] === Request start ===
[2025-08-20 21:59:10][355180460849889][0 ms][DEBUG] START check_frida
[2025-08-20 21:59:10][355180460849889][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 21:59:10][355180460849889][265 ms][DEBUG] SU: done in 265 ms; outroot         20950     1 2263084   7272 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 21:59:10][355180460849889][265 ms][DEBUG] check_frida: running
[2025-08-20 21:59:10][355180460849889][265 ms][DEBUG] END   check_frida in 265 ms
[2025-08-20 21:59:10][355180460849889][265 ms][DEBUG] START check_scloud
[2025-08-20 21:59:10][355180460849889][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 21:59:11][355180460849889][546 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625920 73612 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 21:59:11][355180460849889][546 ms][DEBUG] targetPkg: running
[2025-08-20 21:59:11][355180460849889][546 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 21:59:11][355180460849889][546 ms][DEBUG] rawBody.length=1161
[2025-08-20 21:59:11][355180460849889][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTgwNDYwODQ5ODg5IiwibW9kZWwiOiJTTS1TMjU2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSNUNYMTFMV0FMWSIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAwOSJ9'" -e "main()" -q"
[2025-08-20 21:59:11][355180460849889][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 21:59:11][355180460849889][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTgwNDYwODQ5ODg5IiwibW9kZWwiOiJTTS1TMjU2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSNUNYMTFMV0FMWSIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAwOSJ9'" -e "main()" -q"
[2025-08-20 21:59:13][355180460849889][3202 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTgwNDYwODQ5ODg5IiwibW9kZWwiOiJTTS1TMjU2VkwiLCJwcm9maWxlX0lEIjoiNjg3OTcwZjNkNmNmODU1ZjlkZDM5M2JmIiwiZ3JvdXAiOiIzOTY4ZTkyMS04MjBlLTRjYTEtYTU3OS0yOWU1OTk4ZWU3YTUiLCJ0eXBlIjoiS01FIiwicmVnIjoidXMiLCJkZXZpY2VTZXJpYWxOdW1iZXIiOiJSNUNYMTFMV0FMWSIsInNjaGVtZSI6IlFSX0NPREUiLCJlbWFpbCI6InN1cEBndXAuMzNtYWlsLmNvbSIsImNhcnJpZXIiOiJURk4iLCJvcyI6IjEwIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTAwOSJ9"\r\n
[2025-08-20 21:59:18][355180460849889][7937 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da490fef-ff70-454a-b422-bdfab9109562","id":"QR_da490fef-ff70-454a-b422-bdfab9109562","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 21:59:18][355180460849889][7937 ms][DEBUG] proc_open done in 7391 ms; code=0; res.len=3152
[2025-08-20 21:59:18][355180460849889][7937 ms][DEBUG] END   runCmdUntilRes#1 in 7391 ms
[2025-08-20 21:59:18][355180460849889][7937 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:00:28][353919116734710][0 ms][INFO] === Request start ===
[2025-08-20 22:00:28][353919116734710][1 ms][DEBUG] START check_frida
[2025-08-20 22:00:28][353919116734710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:00:28][353919116734710][305 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2263084   7320 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:00:28][353919116734710][305 ms][DEBUG] check_frida: running
[2025-08-20 22:00:28][353919116734710][305 ms][DEBUG] END   check_frida in 304 ms
[2025-08-20 22:00:28][353919116734710][305 ms][DEBUG] START check_internet
[2025-08-20 22:00:28][353919116734710][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:00:29][353919116734710][742 ms][DEBUG] SU: done in 437 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.108/201.108/201.108/0.000 ms\n
[2025-08-20 22:00:29][353919116734710][742 ms][DEBUG] check_internet: online
[2025-08-20 22:00:29][353919116734710][742 ms][DEBUG] END   check_internet in 437 ms
[2025-08-20 22:00:29][353919116734710][742 ms][DEBUG] START check_scloud
[2025-08-20 22:00:29][353919116734710][742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:00:29][353919116734710][1024 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23625952 74264 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:00:29][353919116734710][1024 ms][DEBUG] targetPkg: running
[2025-08-20 22:00:29][353919116734710][1024 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:00:29][353919116734710][1024 ms][DEBUG] rawBody.length=1159
[2025-08-20 22:00:29][353919116734710][1024 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQzNTQifQ=='" -e "main()" -q"
[2025-08-20 22:00:29][353919116734710][1024 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:00:29][353919116734710][1024 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQzNTQifQ=='" -e "main()" -q"
[2025-08-20 22:00:32][353919116734710][3664 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzQzNTQifQ=="\r\n
[2025-08-20 22:00:35][353919116734710][7086 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 22:00:35][353919116734710][7086 ms][DEBUG] proc_open done in 6062 ms; code=0; res.len=107
[2025-08-20 22:00:35][353919116734710][7086 ms][DEBUG] END   runCmdUntilRes#1 in 6062 ms
[2025-08-20 22:00:35][353919116734710][7086 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 22:00:35][][0 ms][INFO] === Request start ===
[2025-08-20 22:00:35][][1 ms][DEBUG] START check_frida
[2025-08-20 22:00:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:00:36][][264 ms][DEBUG] SU: done in 263 ms; outroot         20950     1 2279504   7300 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:00:36][][264 ms][DEBUG] check_frida: running
[2025-08-20 22:00:36][][264 ms][DEBUG] END   check_frida in 263 ms
[2025-08-20 22:00:36][][264 ms][DEBUG] START check_internet
[2025-08-20 22:00:36][][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:00:36][][592 ms][DEBUG] SU: done in 328 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.393/236.393/236.393/0.000 ms\n
[2025-08-20 22:00:36][][593 ms][DEBUG] check_internet: online
[2025-08-20 22:00:36][][593 ms][DEBUG] END   check_internet in 329 ms
[2025-08-20 22:00:36][][593 ms][DEBUG] START check_scloud
[2025-08-20 22:00:36][][593 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:00:36][][892 ms][DEBUG] SU: done in 299 ms; outu0_a118      20979 10674 23625984 73872 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:00:36][][892 ms][DEBUG] targetPkg: running
[2025-08-20 22:00:36][][892 ms][DEBUG] END   check_scloud in 299 ms
[2025-08-20 22:00:36][][892 ms][DEBUG] rawBody.length=1129
[2025-08-20 22:00:36][][892 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIxNzEifQ=='" -e "main()" -q"
[2025-08-20 22:00:36][][892 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:00:36][][892 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIxNzEifQ=='" -e "main()" -q"
[2025-08-20 22:00:39][][3514 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIxNzEifQ=="\r\n
[2025-08-20 22:00:41][][5405 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 22:00:41][][5406 ms][DEBUG] proc_open done in 4513 ms; code=0; res.len=107
[2025-08-20 22:00:41][][5406 ms][DEBUG] END   runCmdUntilRes#1 in 4514 ms
[2025-08-20 22:00:41][][5406 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 22:00:41][][0 ms][INFO] === Request start ===
[2025-08-20 22:00:41][][1 ms][DEBUG] START check_frida
[2025-08-20 22:00:41][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:00:41][][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2279504   7328 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:00:41][][311 ms][DEBUG] check_frida: running
[2025-08-20 22:00:41][][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-20 22:00:41][][311 ms][DEBUG] START check_internet
[2025-08-20 22:00:41][][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:00:42][][576 ms][DEBUG] SU: done in 265 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.910/162.910/162.910/0.000 ms\n
[2025-08-20 22:00:42][][576 ms][DEBUG] check_internet: online
[2025-08-20 22:00:42][][576 ms][DEBUG] END   check_internet in 265 ms
[2025-08-20 22:00:42][][576 ms][DEBUG] START check_scloud
[2025-08-20 22:00:42][][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:00:42][][857 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626016 74452 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:00:42][][857 ms][DEBUG] targetPkg: running
[2025-08-20 22:00:42][][857 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:00:42][][857 ms][DEBUG] rawBody.length=1129
[2025-08-20 22:00:42][][857 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzcxODAifQ=='" -e "main()" -q"
[2025-08-20 22:00:42][][857 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:00:42][][857 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzcxODAifQ=='" -e "main()" -q"
[2025-08-20 22:00:44][][3451 ms][DEBUG] frida res:"eyJpbWVpIjoiIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWlRPIiwib3MiOiIxMyIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzcxODAifQ=="\r\n
[2025-08-20 22:00:46][][5295 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n
[2025-08-20 22:00:46][][5295 ms][DEBUG] proc_open done in 4438 ms; code=0; res.len=107
[2025-08-20 22:00:46][][5295 ms][DEBUG] END   runCmdUntilRes#1 in 4438 ms
[2025-08-20 22:00:46][][5296 ms][INFO] SUCCESS response from frida (len=107)
[2025-08-20 22:00:47][353919116734710][0 ms][INFO] === Request start ===
[2025-08-20 22:00:47][353919116734710][0 ms][DEBUG] START check_frida
[2025-08-20 22:00:47][353919116734710][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:00:48][353919116734710][312 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   7308 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:00:48][353919116734710][312 ms][DEBUG] check_frida: running
[2025-08-20 22:00:48][353919116734710][312 ms][DEBUG] END   check_frida in 312 ms
[2025-08-20 22:00:48][353919116734710][312 ms][DEBUG] START check_internet
[2025-08-20 22:00:48][353919116734710][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:00:48][353919116734710][515 ms][DEBUG] SU: done in 203 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=117 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 117.979/117.979/117.979/0.000 ms\n
[2025-08-20 22:00:48][353919116734710][515 ms][DEBUG] check_internet: online
[2025-08-20 22:00:48][353919116734710][515 ms][DEBUG] END   check_internet in 203 ms
[2025-08-20 22:00:48][353919116734710][515 ms][DEBUG] START check_scloud
[2025-08-20 22:00:48][353919116734710][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:00:48][353919116734710][734 ms][DEBUG] SU: done in 219 ms; outu0_a118      20979 10674 23626048 73780 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:00:48][353919116734710][734 ms][DEBUG] targetPkg: running
[2025-08-20 22:00:48][353919116734710][734 ms][DEBUG] END   check_scloud in 219 ms
[2025-08-20 22:00:48][353919116734710][734 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:00:48][353919116734710][734 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTkzIn0='" -e "main()" -q"
[2025-08-20 22:00:48][353919116734710][734 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:00:48][353919116734710][734 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTkzIn0='" -e "main()" -q"
[2025-08-20 22:00:51][353919116734710][3359 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzOTE5MTE2NzM0NzEwIiwibW9kZWwiOiJTTS1QNjE1IiwicHJvZmlsZV9JRCI6IjY4N2EwYTI5MjYwY2M4MTk3ZjZmNDQ0NCIsImdyb3VwIjoiMThmNTk3YzgtMDZmOS00ZTRlLWJlNzAtMjliZmE4NGMzYmRjIiwidHlwZSI6IktNRSIsInJlZyI6ImV1IiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUlgyTkIwMEM2MlciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJyYXF1ZWwuMUBvbm1haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTkzIn0="\r\n
[2025-08-20 22:00:53][353919116734710][5546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96663b87-b60f-4ba6-9bc1-49c02841e53c","id":"QR_96663b87-b60f-4ba6-9bc1-49c02841e53c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:00:53][353919116734710][5547 ms][DEBUG] proc_open done in 4813 ms; code=0; res.len=3152
[2025-08-20 22:00:53][353919116734710][5547 ms][DEBUG] END   runCmdUntilRes#1 in 4813 ms
[2025-08-20 22:00:53][353919116734710][5547 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:07:07][351270416448128][1 ms][INFO] === Request start ===
[2025-08-20 22:07:07][351270416448128][2 ms][DEBUG] START check_frida
[2025-08-20 22:07:07][351270416448128][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:07:07][351270416448128][320 ms][DEBUG] SU: done in 319 ms; outroot         20950     1 2263084   7264 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:07:07][351270416448128][320 ms][DEBUG] check_frida: running
[2025-08-20 22:07:07][351270416448128][320 ms][DEBUG] END   check_frida in 319 ms
[2025-08-20 22:07:07][351270416448128][320 ms][DEBUG] START check_scloud
[2025-08-20 22:07:07][351270416448128][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:07:07][351270416448128][617 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23608596 74708 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:07:07][351270416448128][617 ms][DEBUG] targetPkg: running
[2025-08-20 22:07:07][351270416448128][617 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:07:07][351270416448128][617 ms][DEBUG] rawBody.length=1161
[2025-08-20 22:07:07][351270416448128][617 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE2NDQ4MTI4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MDFUVjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczNyJ9'" -e "main()" -q"
[2025-08-20 22:07:07][351270416448128][617 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:07:07][351270416448128][617 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMjcwNDE2NDQ4MTI4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MDFUVjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczNyJ9'" -e "main()" -q"
[2025-08-20 22:07:10][351270416448128][3242 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMjcwNDE2NDQ4MTI4IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFQ3MDFUVjNMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjczNyJ9"\r\n
[2025-08-20 22:07:12][351270416448128][5367 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e62afbfe-417f-437d-b1af-f44813508b3d","id":"QR_e62afbfe-417f-437d-b1af-f44813508b3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:07:12][351270416448128][5367 ms][DEBUG] proc_open done in 4750 ms; code=0; res.len=3152
[2025-08-20 22:07:12][351270416448128][5367 ms][DEBUG] END   runCmdUntilRes#1 in 4750 ms
[2025-08-20 22:07:12][351270416448128][5368 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:09:36][350616259249463][1 ms][INFO] === Request start ===
[2025-08-20 22:09:36][350616259249463][2 ms][DEBUG] START check_frida
[2025-08-20 22:09:36][350616259249463][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:09:36][350616259249463][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2262072   7288 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:09:36][350616259249463][298 ms][DEBUG] check_frida: running
[2025-08-20 22:09:36][350616259249463][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-20 22:09:36][350616259249463][298 ms][DEBUG] START check_scloud
[2025-08-20 22:09:36][350616259249463][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:09:36][350616259249463][532 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23626112 74248 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:09:36][350616259249463][532 ms][DEBUG] targetPkg: running
[2025-08-20 22:09:36][350616259249463][532 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-20 22:09:36][350616259249463][533 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:09:36][350616259249463][533 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU5MjQ5NDYzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMEFHOUFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzgxIn0='" -e "main()" -q"
[2025-08-20 22:09:36][350616259249463][533 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:09:36][350616259249463][533 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjE2MjU5MjQ5NDYzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMEFHOUFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzgxIn0='" -e "main()" -q"
[2025-08-20 22:09:39][350616259249463][3157 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjE2MjU5MjQ5NDYzIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gyMEFHOUFWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MzgxIn0="\r\n
[2025-08-20 22:09:42][350616259249463][6532 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f13c08b-aafb-43ae-8286-335ea7a8a190","id":"QR_4f13c08b-aafb-43ae-8286-335ea7a8a190","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:09:42][350616259249463][6532 ms][DEBUG] proc_open done in 5999 ms; code=0; res.len=3152
[2025-08-20 22:09:42][350616259249463][6532 ms][DEBUG] END   runCmdUntilRes#1 in 5999 ms
[2025-08-20 22:09:42][350616259249463][6532 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:10:07][355646363374241][0 ms][INFO] === Request start ===
[2025-08-20 22:10:07][355646363374241][1 ms][DEBUG] START check_frida
[2025-08-20 22:10:07][355646363374241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:10:08][355646363374241][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2263084   7316 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:10:08][355646363374241][301 ms][DEBUG] check_frida: running
[2025-08-20 22:10:08][355646363374241][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-20 22:10:08][355646363374241][301 ms][DEBUG] START check_internet
[2025-08-20 22:10:08][355646363374241][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:10:08][355646363374241][817 ms][DEBUG] SU: done in 515 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.916/202.916/202.916/0.000 ms\n
[2025-08-20 22:10:08][355646363374241][817 ms][DEBUG] check_internet: online
[2025-08-20 22:10:08][355646363374241][817 ms][DEBUG] END   check_internet in 516 ms
[2025-08-20 22:10:08][355646363374241][817 ms][DEBUG] START check_scloud
[2025-08-20 22:10:08][355646363374241][817 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:10:09][355646363374241][1066 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23626144 75064 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:10:09][355646363374241][1066 ms][DEBUG] targetPkg: running
[2025-08-20 22:10:09][355646363374241][1066 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 22:10:09][355646363374241][1066 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:10:09][355646363374241][1066 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjQ2MzYzMzc0MjQxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMEdCMllGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQyIn0='" -e "main()" -q"
[2025-08-20 22:10:09][355646363374241][1067 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:10:09][355646363374241][1067 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1NjQ2MzYzMzc0MjQxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMEdCMllGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQyIn0='" -e "main()" -q"
[2025-08-20 22:10:11][355646363374241][3676 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1NjQ2MzYzMzc0MjQxIiwibW9kZWwiOiJTTS1BMTU1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFgyMEdCMllGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlBHVSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzQyIn0="\r\n
[2025-08-20 22:10:16][355646363374241][8879 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3af9869c-c5a6-4683-a952-0246555b3175","id":"QR_3af9869c-c5a6-4683-a952-0246555b3175","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:10:16][355646363374241][8879 ms][DEBUG] proc_open done in 7812 ms; code=0; res.len=3152
[2025-08-20 22:10:16][355646363374241][8879 ms][DEBUG] END   runCmdUntilRes#1 in 7812 ms
[2025-08-20 22:10:16][355646363374241][8879 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:12:08][356927260721026][1 ms][INFO] === Request start ===
[2025-08-20 22:12:08][356927260721026][2 ms][DEBUG] START check_frida
[2025-08-20 22:12:08][356927260721026][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:12:09][356927260721026][302 ms][DEBUG] SU: done in 301 ms; outroot         20950     1 2263084   7296 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:12:09][356927260721026][302 ms][DEBUG] check_frida: running
[2025-08-20 22:12:09][356927260721026][302 ms][DEBUG] END   check_frida in 301 ms
[2025-08-20 22:12:09][356927260721026][302 ms][DEBUG] START check_internet
[2025-08-20 22:12:09][356927260721026][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:12:09][356927260721026][740 ms][DEBUG] SU: done in 437 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.625/201.625/201.625/0.000 ms\n
[2025-08-20 22:12:09][356927260721026][740 ms][DEBUG] check_internet: online
[2025-08-20 22:12:09][356927260721026][740 ms][DEBUG] END   check_internet in 437 ms
[2025-08-20 22:12:09][356927260721026][740 ms][DEBUG] START check_scloud
[2025-08-20 22:12:09][356927260721026][740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:12:09][356927260721026][1021 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626176 74004 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:12:09][356927260721026][1021 ms][DEBUG] targetPkg: running
[2025-08-20 22:12:09][356927260721026][1021 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:12:09][356927260721026][1021 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:12:09][356927260721026][1021 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI3MjYwNzIxMDI2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MDg1WlpUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDY0In0='" -e "main()" -q"
[2025-08-20 22:12:09][356927260721026][1021 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:12:09][356927260721026][1021 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTI3MjYwNzIxMDI2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MDg1WlpUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDY0In0='" -e "main()" -q"
[2025-08-20 22:12:12][356927260721026][3630 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTI3MjYwNzIxMDI2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFk0MDg1WlpUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MDY0In0="\r\n
[2025-08-20 22:12:15][356927260721026][6552 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c9565e3-18dd-4d0d-8479-5bd697024314","id":"QR_3c9565e3-18dd-4d0d-8479-5bd697024314","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:12:15][356927260721026][6552 ms][DEBUG] proc_open done in 5531 ms; code=0; res.len=3152
[2025-08-20 22:12:15][356927260721026][6552 ms][DEBUG] END   runCmdUntilRes#1 in 5531 ms
[2025-08-20 22:12:15][356927260721026][6552 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:12:30][354255813154319][0 ms][INFO] === Request start ===
[2025-08-20 22:12:30][354255813154319][1 ms][DEBUG] START check_frida
[2025-08-20 22:12:30][354255813154319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:12:30][354255813154319][301 ms][DEBUG] SU: done in 300 ms; outroot         20950     1 2263084   7292 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:12:30][354255813154319][301 ms][DEBUG] check_frida: running
[2025-08-20 22:12:30][354255813154319][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-20 22:12:30][354255813154319][301 ms][DEBUG] START check_internet
[2025-08-20 22:12:30][354255813154319][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:12:30][354255813154319][566 ms][DEBUG] SU: done in 265 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.508/157.508/157.508/0.000 ms\n
[2025-08-20 22:12:30][354255813154319][567 ms][DEBUG] check_internet: online
[2025-08-20 22:12:30][354255813154319][567 ms][DEBUG] END   check_internet in 265 ms
[2025-08-20 22:12:30][354255813154319][567 ms][DEBUG] START check_scloud
[2025-08-20 22:12:30][354255813154319][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:12:30][354255813154319][817 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23626208 74556 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:12:30][354255813154319][817 ms][DEBUG] targetPkg: running
[2025-08-20 22:12:30][354255813154319][817 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 22:12:30][354255813154319][817 ms][DEBUG] rawBody.length=1154
[2025-08-20 22:12:30][354255813154319][817 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:12:30][354255813154319][817 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:12:30][354255813154319][817 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:12:33][354255813154319][3457 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=="\r\n
[2025-08-20 22:12:35][354255813154319][5363 ms][DEBUG] frida res:res:{"id":"68a25342bfcb0b536c8783e9","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a25342bfcb0b536c8783e9","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n
[2025-08-20 22:12:35][354255813154319][5363 ms][DEBUG] proc_open done in 4547 ms; code=0; res.len=2939
[2025-08-20 22:12:35][354255813154319][5363 ms][DEBUG] END   runCmdUntilRes#1 in 4547 ms
[2025-08-20 22:12:35][354255813154319][5364 ms][INFO] SUCCESS response from frida (len=2939)
[2025-08-20 22:15:49][354255813154319][1 ms][INFO] === Request start ===
[2025-08-20 22:15:49][354255813154319][2 ms][DEBUG] START check_frida
[2025-08-20 22:15:49][354255813154319][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:15:49][354255813154319][282 ms][DEBUG] SU: done in 280 ms; outroot         20950     1 2262072   6872 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:15:49][354255813154319][282 ms][DEBUG] check_frida: running
[2025-08-20 22:15:49][354255813154319][282 ms][DEBUG] END   check_frida in 280 ms
[2025-08-20 22:15:49][354255813154319][282 ms][DEBUG] START check_scloud
[2025-08-20 22:15:49][354255813154319][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:15:49][354255813154319][563 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626240 74072 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:15:49][354255813154319][563 ms][DEBUG] targetPkg: running
[2025-08-20 22:15:49][354255813154319][563 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:15:49][354255813154319][563 ms][DEBUG] rawBody.length=1043
[2025-08-20 22:15:49][354255813154319][563 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:15:49][354255813154319][563 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:15:49][354255813154319][563 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:15:52][354255813154319][3188 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=="\r\n
[2025-08-20 22:15:54][354255813154319][5047 ms][DEBUG] frida res:res:{"id":"68a25342bfcb0b536c8783e9","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a25342bfcb0b536c8783e9","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n
[2025-08-20 22:15:54][354255813154319][5048 ms][DEBUG] proc_open done in 4484 ms; code=0; res.len=2939
[2025-08-20 22:15:54][354255813154319][5048 ms][DEBUG] END   runCmdUntilRes#1 in 4484 ms
[2025-08-20 22:15:54][354255813154319][5048 ms][INFO] SUCCESS response from frida (len=2939)
[2025-08-20 22:16:07][356430204392798][0 ms][INFO] === Request start ===
[2025-08-20 22:16:07][356430204392798][1 ms][DEBUG] START check_frida
[2025-08-20 22:16:07][356430204392798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:16:08][356430204392798][312 ms][DEBUG] SU: done in 311 ms; outroot         20950     1 2263084   5828 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:16:08][356430204392798][312 ms][DEBUG] check_frida: running
[2025-08-20 22:16:08][356430204392798][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-20 22:16:08][356430204392798][312 ms][DEBUG] START check_internet
[2025-08-20 22:16:08][356430204392798][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:16:08][356430204392798][733 ms][DEBUG] SU: done in 421 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.518/200.518/200.518/0.000 ms\n
[2025-08-20 22:16:08][356430204392798][734 ms][DEBUG] check_internet: online
[2025-08-20 22:16:08][356430204392798][734 ms][DEBUG] END   check_internet in 422 ms
[2025-08-20 22:16:08][356430204392798][734 ms][DEBUG] START check_scloud
[2025-08-20 22:16:08][356430204392798][734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:16:08][356430204392798][1015 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626272 74420 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:16:08][356430204392798][1015 ms][DEBUG] targetPkg: running
[2025-08-20 22:16:08][356430204392798][1015 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:16:08][356430204392798][1015 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:16:08][356430204392798][1015 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDMwMjA0MzkyNzk4IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMUVEU0JBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDEzIn0='" -e "main()" -q"
[2025-08-20 22:16:08][356430204392798][1015 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:16:08][356430204392798][1015 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2NDMwMjA0MzkyNzk4IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMUVEU0JBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDEzIn0='" -e "main()" -q"
[2025-08-20 22:16:11][356430204392798][3624 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2NDMwMjA0MzkyNzk4IiwibW9kZWwiOiJTTS1BMzQ2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dCMUVEU0JBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNHVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4MDEzIn0="\r\n
[2025-08-20 22:16:15][356430204392798][7265 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_259b9840-0661-4e32-b3de-a1f6f018fbe7","id":"QR_259b9840-0661-4e32-b3de-a1f6f018fbe7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:16:15][356430204392798][7265 ms][DEBUG] proc_open done in 6250 ms; code=0; res.len=3152
[2025-08-20 22:16:15][356430204392798][7265 ms][DEBUG] END   runCmdUntilRes#1 in 6250 ms
[2025-08-20 22:16:15][356430204392798][7265 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:17:07][350068480897019][1 ms][INFO] === Request start ===
[2025-08-20 22:17:07][350068480897019][2 ms][DEBUG] START check_frida
[2025-08-20 22:17:07][350068480897019][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:17:07][350068480897019][256 ms][DEBUG] SU: done in 254 ms; outroot         20950     1 2263084   5840 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:17:07][350068480897019][256 ms][DEBUG] check_frida: running
[2025-08-20 22:17:07][350068480897019][256 ms][DEBUG] END   check_frida in 255 ms
[2025-08-20 22:17:07][350068480897019][256 ms][DEBUG] START check_scloud
[2025-08-20 22:17:07][350068480897019][256 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:17:07][350068480897019][523 ms][DEBUG] SU: done in 267 ms; outu0_a118      20979 10674 23626304 73784 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:17:07][350068480897019][523 ms][DEBUG] targetPkg: running
[2025-08-20 22:17:07][350068480897019][524 ms][DEBUG] END   check_scloud in 267 ms
[2025-08-20 22:17:07][350068480897019][524 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:17:07][350068480897019][524 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDY4NDgwODk3MDE5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDhTSzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjQ4In0='" -e "main()" -q"
[2025-08-20 22:17:07][350068480897019][524 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:17:07][350068480897019][524 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMDY4NDgwODk3MDE5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDhTSzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjQ4In0='" -e "main()" -q"
[2025-08-20 22:17:10][350068480897019][3147 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMDY4NDgwODk3MDE5IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGOFcxMDhTSzhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MjQ4In0="\r\n
[2025-08-20 22:17:13][350068480897019][6428 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3dbefd8-82ca-4175-894f-b39bc8f3c23b","id":"QR_d3dbefd8-82ca-4175-894f-b39bc8f3c23b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:17:13][350068480897019][6428 ms][DEBUG] proc_open done in 5904 ms; code=0; res.len=3152
[2025-08-20 22:17:13][350068480897019][6428 ms][DEBUG] END   runCmdUntilRes#1 in 5904 ms
[2025-08-20 22:17:13][350068480897019][6428 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:17:20][354255813154319][0 ms][INFO] === Request start ===
[2025-08-20 22:17:20][354255813154319][1 ms][DEBUG] START check_frida
[2025-08-20 22:17:20][354255813154319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:17:20][354255813154319][257 ms][DEBUG] SU: done in 256 ms; outroot         20950     1 2279504   4440 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:17:20][354255813154319][257 ms][DEBUG] check_frida: running
[2025-08-20 22:17:20][354255813154319][257 ms][DEBUG] END   check_frida in 256 ms
[2025-08-20 22:17:20][354255813154319][257 ms][DEBUG] START check_scloud
[2025-08-20 22:17:20][354255813154319][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:17:21][354255813154319][569 ms][DEBUG] SU: done in 313 ms; outu0_a118      20979 10674 23626336 74436 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:17:21][354255813154319][570 ms][DEBUG] targetPkg: running
[2025-08-20 22:17:21][354255813154319][570 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-20 22:17:21][354255813154319][570 ms][DEBUG] rawBody.length=1154
[2025-08-20 22:17:21][354255813154319][570 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:17:21][354255813154319][570 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:17:21][354255813154319][570 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:17:23][354255813154319][3210 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=="\r\n
[2025-08-20 22:17:25][354255813154319][4882 ms][DEBUG] frida res:res:{"id":"68a25342bfcb0b536c8783e9","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a25342bfcb0b536c8783e9","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n
[2025-08-20 22:17:25][354255813154319][4882 ms][DEBUG] proc_open done in 4312 ms; code=0; res.len=2939
[2025-08-20 22:17:25][354255813154319][4882 ms][DEBUG] END   runCmdUntilRes#1 in 4312 ms
[2025-08-20 22:17:25][354255813154319][4882 ms][INFO] SUCCESS response from frida (len=2939)
[2025-08-20 22:19:07][352623853831306][0 ms][INFO] === Request start ===
[2025-08-20 22:19:07][352623853831306][1 ms][DEBUG] START check_frida
[2025-08-20 22:19:07][352623853831306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:19:07][352623853831306][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:19:07][352623853831306][309 ms][DEBUG] check_frida: running
[2025-08-20 22:19:07][352623853831306][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-20 22:19:07][352623853831306][309 ms][DEBUG] START check_scloud
[2025-08-20 22:19:07][352623853831306][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:19:07][352623853831306][590 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626368 74284 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:19:07][352623853831306][590 ms][DEBUG] targetPkg: running
[2025-08-20 22:19:07][352623853831306][590 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:19:07][352623853831306][590 ms][DEBUG] rawBody.length=1161
[2025-08-20 22:19:07][352623853831306][590 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzODUzODMxMzA2IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gyMDE3SjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA2NSJ9'" -e "main()" -q"
[2025-08-20 22:19:07][352623853831306][590 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:19:07][352623853831306][590 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjIzODUzODMxMzA2IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gyMDE3SjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA2NSJ9'" -e "main()" -q"
[2025-08-20 22:19:10][352623853831306][3184 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjIzODUzODMxMzA2IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlIzQ1gyMDE3SjJXIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjA2NSJ9"\r\n
[2025-08-20 22:19:12][352623853831306][5309 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5e4761c-149e-4197-a797-52542c021ebf","id":"QR_a5e4761c-149e-4197-a797-52542c021ebf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:19:12][352623853831306][5310 ms][DEBUG] proc_open done in 4719 ms; code=0; res.len=3152
[2025-08-20 22:19:12][352623853831306][5310 ms][DEBUG] END   runCmdUntilRes#1 in 4719 ms
[2025-08-20 22:19:12][352623853831306][5310 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:19:15][351782256958230][1 ms][INFO] === Request start ===
[2025-08-20 22:19:15][351782256958230][2 ms][DEBUG] START check_frida
[2025-08-20 22:19:15][351782256958230][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:19:15][351782256958230][264 ms][DEBUG] SU: done in 263 ms; outroot         20950     1 2279504   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:19:15][351782256958230][265 ms][DEBUG] check_frida: running
[2025-08-20 22:19:15][351782256958230][265 ms][DEBUG] END   check_frida in 263 ms
[2025-08-20 22:19:15][351782256958230][265 ms][DEBUG] START check_scloud
[2025-08-20 22:19:15][351782256958230][265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:19:15][351782256958230][546 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626400 74880 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:19:15][351782256958230][546 ms][DEBUG] targetPkg: running
[2025-08-20 22:19:15][351782256958230][546 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:19:15][351782256958230][546 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:19:15][351782256958230][546 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjU2OTU4MjMwIiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMExSRDJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjMwIn0='" -e "main()" -q"
[2025-08-20 22:19:15][351782256958230][546 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:19:15][351782256958230][546 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNzgyMjU2OTU4MjMwIiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMExSRDJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjMwIn0='" -e "main()" -q"
[2025-08-20 22:19:18][351782256958230][3139 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNzgyMjU2OTU4MjMwIiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hBMExSRDJCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBVSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MjMwIn0="\r\n
[2025-08-20 22:19:23][351782256958230][7778 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28ef7019-3a3c-4234-8770-259e971b0748","id":"QR_28ef7019-3a3c-4234-8770-259e971b0748","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:19:23][351782256958230][7778 ms][DEBUG] proc_open done in 7233 ms; code=0; res.len=3152
[2025-08-20 22:19:23][351782256958230][7779 ms][DEBUG] END   runCmdUntilRes#1 in 7233 ms
[2025-08-20 22:19:23][351782256958230][7779 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:20:08][350824195083372][0 ms][INFO] === Request start ===
[2025-08-20 22:20:08][350824195083372][1 ms][DEBUG] START check_frida
[2025-08-20 22:20:08][350824195083372][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:20:08][350824195083372][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2263084   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:20:08][350824195083372][292 ms][DEBUG] check_frida: running
[2025-08-20 22:20:08][350824195083372][292 ms][DEBUG] END   check_frida in 291 ms
[2025-08-20 22:20:08][350824195083372][292 ms][DEBUG] START check_internet
[2025-08-20 22:20:08][350824195083372][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:20:08][350824195083372][541 ms][DEBUG] SU: done in 249 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.094/150.094/150.094/0.000 ms\n
[2025-08-20 22:20:08][350824195083372][541 ms][DEBUG] check_internet: online
[2025-08-20 22:20:08][350824195083372][541 ms][DEBUG] END   check_internet in 249 ms
[2025-08-20 22:20:08][350824195083372][541 ms][DEBUG] START check_scloud
[2025-08-20 22:20:08][350824195083372][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:20:09][350824195083372][791 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23626432 74136 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:20:09][350824195083372][791 ms][DEBUG] targetPkg: running
[2025-08-20 22:20:09][350824195083372][791 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 22:20:09][350824195083372][792 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:20:09][350824195083372][792 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk1MDgzMzcyIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMTI4Tk1EIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njk4In0='" -e "main()" -q"
[2025-08-20 22:20:09][350824195083372][792 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:20:09][350824195083372][792 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwODI0MTk1MDgzMzcyIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMTI4Tk1EIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njk4In0='" -e "main()" -q"
[2025-08-20 22:20:11][350824195083372][3401 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwODI0MTk1MDgzMzcyIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1kyMTI4Tk1EIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0Njk4In0="\r\n
[2025-08-20 22:20:15][350824195083372][7181 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44d3738d-3051-4d94-acb4-a373d5617c37","id":"QR_44d3738d-3051-4d94-acb4-a373d5617c37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:20:15][350824195083372][7181 ms][DEBUG] proc_open done in 6389 ms; code=0; res.len=3152
[2025-08-20 22:20:15][350824195083372][7181 ms][DEBUG] END   runCmdUntilRes#1 in 6390 ms
[2025-08-20 22:20:15][350824195083372][7181 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:21:08][356223182385227][0 ms][INFO] === Request start ===
[2025-08-20 22:21:08][356223182385227][1 ms][DEBUG] START check_frida
[2025-08-20 22:21:08][356223182385227][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:21:08][356223182385227][295 ms][DEBUG] SU: done in 294 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:21:08][356223182385227][295 ms][DEBUG] check_frida: running
[2025-08-20 22:21:08][356223182385227][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-20 22:21:08][356223182385227][295 ms][DEBUG] START check_scloud
[2025-08-20 22:21:08][356223182385227][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:21:08][356223182385227][545 ms][DEBUG] SU: done in 249 ms; outu0_a118      20979 10674 23626464 74864 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:21:08][356223182385227][545 ms][DEBUG] targetPkg: running
[2025-08-20 22:21:08][356223182385227][545 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 22:21:08][356223182385227][545 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:21:08][356223182385227][545 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjIzMTgyMzg1MjI3IiwibW9kZWwiOiJTTS1GOTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c3MUdOQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzk5In0='" -e "main()" -q"
[2025-08-20 22:21:08][356223182385227][545 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:21:08][356223182385227][545 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2MjIzMTgyMzg1MjI3IiwibW9kZWwiOiJTTS1GOTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c3MUdOQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzk5In0='" -e "main()" -q"
[2025-08-20 22:21:11][356223182385227][3169 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2MjIzMTgyMzg1MjI3IiwibW9kZWwiOiJTTS1GOTQ2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1c3MUdOQTRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzk5In0="\r\n
[2025-08-20 22:21:14][356223182385227][6684 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33f988b4-d5dc-43e6-8d21-4f4a7310a23a","id":"QR_33f988b4-d5dc-43e6-8d21-4f4a7310a23a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:21:14][356223182385227][6684 ms][DEBUG] proc_open done in 6139 ms; code=0; res.len=3152
[2025-08-20 22:21:14][356223182385227][6684 ms][DEBUG] END   runCmdUntilRes#1 in 6139 ms
[2025-08-20 22:21:14][356223182385227][6684 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:23:17][354255813154319][1 ms][INFO] === Request start ===
[2025-08-20 22:23:17][354255813154319][2 ms][DEBUG] START check_frida
[2025-08-20 22:23:17][354255813154319][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:23:18][354255813154319][300 ms][DEBUG] SU: done in 298 ms; outroot         20950     1 2263084   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:23:18][354255813154319][300 ms][DEBUG] check_frida: running
[2025-08-20 22:23:18][354255813154319][300 ms][DEBUG] END   check_frida in 298 ms
[2025-08-20 22:23:18][354255813154319][300 ms][DEBUG] START check_scloud
[2025-08-20 22:23:18][354255813154319][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:23:18][354255813154319][581 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626496 74504 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:23:18][354255813154319][581 ms][DEBUG] targetPkg: running
[2025-08-20 22:23:18][354255813154319][581 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:23:18][354255813154319][581 ms][DEBUG] rawBody.length=693
[2025-08-20 22:23:18][354255813154319][581 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:23:18][354255813154319][581 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:23:18][354255813154319][581 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=='" -e "main()" -q"
[2025-08-20 22:23:21][354255813154319][3221 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MjU1ODEzMTU0MzE5IiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiIxOTg0Mjc0NzAyIiwiZ3JvdXAiOiI4ZTRjNjNlNS0yNTM2LTQ3NmEtOGI1ZC1hYWY4NmZiYjJiMTIiLCJ0eXBlIjoiS0MiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IiIsInNjaGVtZSI6Ik5GQyIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJUTUIiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiJLTk9YLTM1IiwiZGV2aWNlSWQiOiIifQ=="\r\n
[2025-08-20 22:23:22][354255813154319][5080 ms][DEBUG] frida res:res:{"id":"68a25342bfcb0b536c8783e9","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a25342bfcb0b536c8783e9","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n
[2025-08-20 22:23:22][354255813154319][5080 ms][DEBUG] proc_open done in 4499 ms; code=0; res.len=2939
[2025-08-20 22:23:22][354255813154319][5080 ms][DEBUG] END   runCmdUntilRes#1 in 4499 ms
[2025-08-20 22:23:22][354255813154319][5080 ms][INFO] SUCCESS response from frida (len=2939)
[2025-08-20 22:23:36][351676563400219][0 ms][INFO] === Request start ===
[2025-08-20 22:23:36][351676563400219][1 ms][DEBUG] START check_frida
[2025-08-20 22:23:36][351676563400219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:23:37][351676563400219][311 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2263084   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:23:37][351676563400219][311 ms][DEBUG] check_frida: running
[2025-08-20 22:23:37][351676563400219][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-20 22:23:37][351676563400219][311 ms][DEBUG] START check_scloud
[2025-08-20 22:23:37][351676563400219][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:23:37][351676563400219][594 ms][DEBUG] SU: done in 283 ms; outu0_a118      20979 10674 23626528 75056 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:23:37][351676563400219][594 ms][DEBUG] targetPkg: running
[2025-08-20 22:23:37][351676563400219][594 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-20 22:23:37][351676563400219][594 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:23:37][351676563400219][594 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTYzNDAwMjE5IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MDFNNjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDA1In0='" -e "main()" -q"
[2025-08-20 22:23:37][351676563400219][594 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:23:37][351676563400219][594 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjc2NTYzNDAwMjE5IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MDFNNjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDA1In0='" -e "main()" -q"
[2025-08-20 22:23:39][351676563400219][3216 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjc2NTYzNDAwMjE5IiwibW9kZWwiOiJTTS1BMzU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1g5MDFNNjhZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUQyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMwIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDA1In0="\r\n
[2025-08-20 22:23:43][351676563400219][7247 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2a82b50-246b-42c1-b35b-65257d2989d0","id":"QR_a2a82b50-246b-42c1-b35b-65257d2989d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:23:43][351676563400219][7247 ms][DEBUG] proc_open done in 6652 ms; code=0; res.len=3152
[2025-08-20 22:23:43][351676563400219][7247 ms][DEBUG] END   runCmdUntilRes#1 in 6652 ms
[2025-08-20 22:23:43][351676563400219][7247 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:26:10][350455580095596][1 ms][INFO] === Request start ===
[2025-08-20 22:26:10][350455580095596][2 ms][DEBUG] START check_frida
[2025-08-20 22:26:10][350455580095596][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:26:11][350455580095596][307 ms][DEBUG] SU: done in 305 ms; outroot         20950     1 2263084   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:26:11][350455580095596][307 ms][DEBUG] check_frida: running
[2025-08-20 22:26:11][350455580095596][307 ms][DEBUG] END   check_frida in 305 ms
[2025-08-20 22:26:11][350455580095596][307 ms][DEBUG] START check_internet
[2025-08-20 22:26:11][350455580095596][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:26:11][350455580095596][604 ms][DEBUG] SU: done in 297 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.221/202.221/202.221/0.000 ms\n
[2025-08-20 22:26:11][350455580095596][604 ms][DEBUG] check_internet: online
[2025-08-20 22:26:11][350455580095596][604 ms][DEBUG] END   check_internet in 297 ms
[2025-08-20 22:26:11][350455580095596][604 ms][DEBUG] START check_scloud
[2025-08-20 22:26:11][350455580095596][604 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:26:11][350455580095596][885 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626560 74144 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:26:11][350455580095596][885 ms][DEBUG] targetPkg: running
[2025-08-20 22:26:11][350455580095596][885 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:26:11][350455580095596][885 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:26:11][350455580095596][885 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgwMDk1NTk2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc0VFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzAwIn0='" -e "main()" -q"
[2025-08-20 22:26:11][350455580095596][885 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:26:11][350455580095596][885 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDU1NTgwMDk1NTk2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc0VFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzAwIn0='" -e "main()" -q"
[2025-08-20 22:26:14][350455580095596][3494 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDU1NTgwMDk1NTk2IiwibW9kZWwiOiJTTS1BMTY1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFk0MDc0VFFaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzAwIn0="\r\n
[2025-08-20 22:26:17][350455580095596][6930 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12655ad6-ca23-43b4-b750-a9282e014b3e","id":"QR_12655ad6-ca23-43b4-b750-a9282e014b3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:26:17][350455580095596][6930 ms][DEBUG] proc_open done in 6045 ms; code=0; res.len=3152
[2025-08-20 22:26:17][350455580095596][6930 ms][DEBUG] END   runCmdUntilRes#1 in 6045 ms
[2025-08-20 22:26:17][350455580095596][6930 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:29:09][350603383611974][1 ms][INFO] === Request start ===
[2025-08-20 22:29:09][350603383611974][2 ms][DEBUG] START check_frida
[2025-08-20 22:29:09][350603383611974][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:29:09][350603383611974][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:29:09][350603383611974][299 ms][DEBUG] check_frida: running
[2025-08-20 22:29:09][350603383611974][299 ms][DEBUG] END   check_frida in 298 ms
[2025-08-20 22:29:09][350603383611974][299 ms][DEBUG] START check_scloud
[2025-08-20 22:29:09][350603383611974][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:29:10][350603383611974][596 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23626592 75036 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:29:10][350603383611974][596 ms][DEBUG] targetPkg: running
[2025-08-20 22:29:10][350603383611974][596 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:29:10][350603383611974][596 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:29:10][350603383611974][596 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjAzMzgzNjExOTc0IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1RDMDJOSlhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Nzk4In0='" -e "main()" -q"
[2025-08-20 22:29:10][350603383611974][596 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:29:10][350603383611974][596 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNjAzMzgzNjExOTc0IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1RDMDJOSlhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Nzk4In0='" -e "main()" -q"
[2025-08-20 22:29:12][350603383611974][3205 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNjAzMzgzNjExOTc0IiwibW9kZWwiOiJTTS1BNTM2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1RDMDJOSlhCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3Nzk4In0="\r\n
[2025-08-20 22:29:17][350603383611974][8094 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29e2df3a-f25c-42f0-aadd-adea355b26d6","id":"QR_29e2df3a-f25c-42f0-aadd-adea355b26d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:29:17][350603383611974][8094 ms][DEBUG] proc_open done in 7498 ms; code=0; res.len=3152
[2025-08-20 22:29:17][350603383611974][8094 ms][DEBUG] END   runCmdUntilRes#1 in 7498 ms
[2025-08-20 22:29:17][350603383611974][8094 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:31:42][354510914242862][1 ms][INFO] === Request start ===
[2025-08-20 22:31:42][354510914242862][2 ms][DEBUG] START check_frida
[2025-08-20 22:31:42][354510914242862][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:31:42][354510914242862][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2262072   4468 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:31:42][354510914242862][298 ms][DEBUG] check_frida: running
[2025-08-20 22:31:42][354510914242862][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-20 22:31:42][354510914242862][298 ms][DEBUG] START check_scloud
[2025-08-20 22:31:42][354510914242862][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:31:43][354510914242862][594 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23626624 74476 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:31:43][354510914242862][595 ms][DEBUG] targetPkg: running
[2025-08-20 22:31:43][354510914242862][595 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:31:43][354510914242862][595 ms][DEBUG] rawBody.length=1159
[2025-08-20 22:31:43][354510914242862][595 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTEwOTE0MjQyODYyIiwibW9kZWwiOiJTTS1QNjIwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTQwRUtaWlIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE0NDIifQ=='" -e "main()" -q"
[2025-08-20 22:31:43][354510914242862][595 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:31:43][354510914242862][595 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NTEwOTE0MjQyODYyIiwibW9kZWwiOiJTTS1QNjIwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTQwRUtaWlIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE0NDIifQ=='" -e "main()" -q"
[2025-08-20 22:31:45][354510914242862][3219 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NTEwOTE0MjQyODYyIiwibW9kZWwiOiJTTS1QNjIwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyWTQwRUtaWlIiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE0NDIifQ=="\r\n
[2025-08-20 22:31:49][354510914242862][6515 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e9b7b04-71e8-4ce7-96f6-13046c2b3322","id":"QR_2e9b7b04-71e8-4ce7-96f6-13046c2b3322","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:31:49][354510914242862][6515 ms][DEBUG] proc_open done in 5920 ms; code=0; res.len=3152
[2025-08-20 22:31:49][354510914242862][6515 ms][DEBUG] END   runCmdUntilRes#1 in 5920 ms
[2025-08-20 22:31:49][354510914242862][6515 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:34:53][358140832046033][1 ms][INFO] === Request start ===
[2025-08-20 22:34:53][358140832046033][2 ms][DEBUG] START check_frida
[2025-08-20 22:34:53][358140832046033][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:34:54][358140832046033][309 ms][DEBUG] SU: done in 307 ms; outroot         20950     1 2263084   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:34:54][358140832046033][309 ms][DEBUG] check_frida: running
[2025-08-20 22:34:54][358140832046033][309 ms][DEBUG] END   check_frida in 307 ms
[2025-08-20 22:34:54][358140832046033][309 ms][DEBUG] START check_internet
[2025-08-20 22:34:54][358140832046033][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:34:54][358140832046033][699 ms][DEBUG] SU: done in 390 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.826/200.826/200.826/0.000 ms\n
[2025-08-20 22:34:54][358140832046033][699 ms][DEBUG] check_internet: online
[2025-08-20 22:34:54][358140832046033][699 ms][DEBUG] END   check_internet in 390 ms
[2025-08-20 22:34:54][358140832046033][699 ms][DEBUG] START check_scloud
[2025-08-20 22:34:54][358140832046033][699 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:34:54][358140832046033][965 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23626656 75116 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:34:54][358140832046033][965 ms][DEBUG] targetPkg: running
[2025-08-20 22:34:54][358140832046033][965 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-20 22:34:54][358140832046033][965 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:34:54][358140832046033][965 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQwODMyMDQ2MDMzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hBMDkxVFlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTgxIn0='" -e "main()" -q"
[2025-08-20 22:34:54][358140832046033][965 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:34:54][358140832046033][965 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU4MTQwODMyMDQ2MDMzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hBMDkxVFlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTgxIn0='" -e "main()" -q"
[2025-08-20 22:34:57][358140832046033][3526 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU4MTQwODMyMDQ2MDMzIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1hBMDkxVFlOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTgxIn0="\r\n
[2025-08-20 22:35:00][358140832046033][6822 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b0696ed-10bb-4f13-a3c9-ea310d33fddd","id":"QR_1b0696ed-10bb-4f13-a3c9-ea310d33fddd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:35:00][358140832046033][6823 ms][DEBUG] proc_open done in 5857 ms; code=0; res.len=3152
[2025-08-20 22:35:00][358140832046033][6823 ms][DEBUG] END   runCmdUntilRes#1 in 5857 ms
[2025-08-20 22:35:00][358140832046033][6823 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:35:14][350948905223497][1 ms][INFO] === Request start ===
[2025-08-20 22:35:14][350948905223497][2 ms][DEBUG] START check_frida
[2025-08-20 22:35:14][350948905223497][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:35:15][350948905223497][246 ms][DEBUG] SU: done in 244 ms; outroot         20950     1 2263084   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:35:15][350948905223497][246 ms][DEBUG] check_frida: running
[2025-08-20 22:35:15][350948905223497][246 ms][DEBUG] END   check_frida in 244 ms
[2025-08-20 22:35:15][350948905223497][246 ms][DEBUG] START check_scloud
[2025-08-20 22:35:15][350948905223497][246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:35:15][350948905223497][527 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23626688 74128 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:35:15][350948905223497][527 ms][DEBUG] targetPkg: running
[2025-08-20 22:35:15][350948905223497][527 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 22:35:15][350948905223497][527 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:35:15][350948905223497][527 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTQ4OTA1MjIzNDk3IiwibW9kZWwiOiJTTS1HOTkxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1IyMDBEWldOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDI3In0='" -e "main()" -q"
[2025-08-20 22:35:15][350948905223497][527 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:35:15][350948905223497][528 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTQ4OTA1MjIzNDk3IiwibW9kZWwiOiJTTS1HOTkxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1IyMDBEWldOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDI3In0='" -e "main()" -q"
[2025-08-20 22:35:18][350948905223497][3167 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTQ4OTA1MjIzNDk3IiwibW9kZWwiOiJTTS1HOTkxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYQ1IyMDBEWldOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDI3In0="\r\n
[2025-08-20 22:35:22][350948905223497][7510 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c5d122d-9041-47e0-a3b0-61b21c7102d2","id":"QR_8c5d122d-9041-47e0-a3b0-61b21c7102d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:35:22][350948905223497][7510 ms][DEBUG] proc_open done in 6982 ms; code=0; res.len=3152
[2025-08-20 22:35:22][350948905223497][7510 ms][DEBUG] END   runCmdUntilRes#1 in 6982 ms
[2025-08-20 22:35:22][350948905223497][7510 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:36:45][351065780627905][1 ms][INFO] === Request start ===
[2025-08-20 22:36:45][351065780627905][2 ms][DEBUG] START check_frida
[2025-08-20 22:36:45][351065780627905][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:36:45][351065780627905][269 ms][DEBUG] SU: done in 267 ms; outroot         20950     1 2263084   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:36:45][351065780627905][269 ms][DEBUG] check_frida: running
[2025-08-20 22:36:45][351065780627905][269 ms][DEBUG] END   check_frida in 267 ms
[2025-08-20 22:36:45][351065780627905][269 ms][DEBUG] START check_internet
[2025-08-20 22:36:45][351065780627905][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:36:45][351065780627905][534 ms][DEBUG] SU: done in 265 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=159 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 159.033/159.033/159.033/0.000 ms\n
[2025-08-20 22:36:45][351065780627905][535 ms][DEBUG] check_internet: online
[2025-08-20 22:36:45][351065780627905][535 ms][DEBUG] END   check_internet in 266 ms
[2025-08-20 22:36:45][351065780627905][535 ms][DEBUG] START check_scloud
[2025-08-20 22:36:45][351065780627905][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:36:46][351065780627905][831 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23626720 74936 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:36:46][351065780627905][831 ms][DEBUG] targetPkg: running
[2025-08-20 22:36:46][351065780627905][831 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:36:46][351065780627905][831 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:36:46][351065780627905][832 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY1NzgwNjI3OTA1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMEFZVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzgyIn0='" -e "main()" -q"
[2025-08-20 22:36:46][351065780627905][832 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:36:46][351065780627905][832 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMDY1NzgwNjI3OTA1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMEFZVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzgyIn0='" -e "main()" -q"
[2025-08-20 22:36:48][351065780627905][3471 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMDY1NzgwNjI3OTA1IiwibW9kZWwiOiJTTS1TOTIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1gxMEFZVkVCIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1NzgyIn0="\r\n
[2025-08-20 22:36:53][351065780627905][7908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79752b66-c8c9-4d33-b9b3-b0567dcc708f","id":"QR_79752b66-c8c9-4d33-b9b3-b0567dcc708f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:36:53][351065780627905][7908 ms][DEBUG] proc_open done in 7076 ms; code=0; res.len=3152
[2025-08-20 22:36:53][351065780627905][7908 ms][DEBUG] END   runCmdUntilRes#1 in 7076 ms
[2025-08-20 22:36:53][351065780627905][7908 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:42:44][357970100816662][1 ms][INFO] === Request start ===
[2025-08-20 22:42:44][357970100816662][2 ms][DEBUG] START check_frida
[2025-08-20 22:42:44][357970100816662][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:42:44][357970100816662][301 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2280516   4432 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:42:44][357970100816662][301 ms][DEBUG] check_frida: running
[2025-08-20 22:42:44][357970100816662][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-20 22:42:44][357970100816662][301 ms][DEBUG] START check_internet
[2025-08-20 22:42:44][357970100816662][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:42:45][357970100816662][690 ms][DEBUG] SU: done in 389 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.752/201.752/201.752/0.000 ms\n
[2025-08-20 22:42:45][357970100816662][691 ms][DEBUG] check_internet: online
[2025-08-20 22:42:45][357970100816662][691 ms][DEBUG] END   check_internet in 389 ms
[2025-08-20 22:42:45][357970100816662][691 ms][DEBUG] START check_scloud
[2025-08-20 22:42:45][357970100816662][691 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:42:45][357970100816662][956 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23626752 73864 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:42:45][357970100816662][956 ms][DEBUG] targetPkg: running
[2025-08-20 22:42:45][357970100816662][956 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-20 22:42:45][357970100816662][956 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:42:45][357970100816662][956 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTcwMTAwODE2NjYyIiwibW9kZWwiOiJTTS1BMzA1RyIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE04N1BZTFdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzQ5In0='" -e "main()" -q"
[2025-08-20 22:42:45][357970100816662][956 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:42:45][357970100816662][956 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTcwMTAwODE2NjYyIiwibW9kZWwiOiJTTS1BMzA1RyIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE04N1BZTFdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzQ5In0='" -e "main()" -q"
[2025-08-20 22:42:48][357970100816662][3612 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTcwMTAwODE2NjYyIiwibW9kZWwiOiJTTS1BMzA1RyIsInByb2ZpbGVfSUQiOiI2ODc5NzI3NGIwOTA0NzBlOWI1ZTg2NjkiLCJncm91cCI6ImNiMjEyOTc0LTE5YzUtNDgyOC04NmViLTUxMTE2Yzk1ZDkyMiIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OE04N1BZTFdOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNPTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MzQ5In0="\r\n
[2025-08-20 22:42:51][357970100816662][6908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79dd5f5b-c1bd-4171-9589-7379a014a6d7","id":"QR_79dd5f5b-c1bd-4171-9589-7379a014a6d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:42:51][357970100816662][6908 ms][DEBUG] proc_open done in 5952 ms; code=0; res.len=3152
[2025-08-20 22:42:51][357970100816662][6908 ms][DEBUG] END   runCmdUntilRes#1 in 5952 ms
[2025-08-20 22:42:51][357970100816662][6908 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:43:35][350448241207494][0 ms][INFO] === Request start ===
[2025-08-20 22:43:35][350448241207494][1 ms][DEBUG] START check_frida
[2025-08-20 22:43:35][350448241207494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:43:35][350448241207494][322 ms][DEBUG] SU: done in 321 ms; outroot         20950     1 2263084   4456 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:43:35][350448241207494][322 ms][DEBUG] check_frida: running
[2025-08-20 22:43:35][350448241207494][322 ms][DEBUG] END   check_frida in 321 ms
[2025-08-20 22:43:35][350448241207494][322 ms][DEBUG] START check_scloud
[2025-08-20 22:43:35][350448241207494][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:43:35][350448241207494][634 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23626784 74852 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:43:35][350448241207494][634 ms][DEBUG] targetPkg: running
[2025-08-20 22:43:35][350448241207494][634 ms][DEBUG] END   check_scloud in 313 ms
[2025-08-20 22:43:35][350448241207494][634 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:43:35][350448241207494][635 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDQ4MjQxMjA3NDk0IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cyMUFMNzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTk0In0='" -e "main()" -q"
[2025-08-20 22:43:35][350448241207494][635 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:43:35][350448241207494][635 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDQ4MjQxMjA3NDk0IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cyMUFMNzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTk0In0='" -e "main()" -q"
[2025-08-20 22:43:38][350448241207494][3274 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDQ4MjQxMjA3NDk0IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1cyMUFMNzdNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0MTk0In0="\r\n
[2025-08-20 22:43:42][350448241207494][7632 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_854eb5b2-16f1-4ecd-9869-2d5bf3909c77","id":"QR_854eb5b2-16f1-4ecd-9869-2d5bf3909c77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:43:42][350448241207494][7632 ms][DEBUG] proc_open done in 6998 ms; code=0; res.len=3152
[2025-08-20 22:43:42][350448241207494][7632 ms][DEBUG] END   runCmdUntilRes#1 in 6998 ms
[2025-08-20 22:43:42][350448241207494][7632 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:43:53][350498051200840][0 ms][INFO] === Request start ===
[2025-08-20 22:43:53][350498051200840][1 ms][DEBUG] START check_frida
[2025-08-20 22:43:53][350498051200840][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:43:53][350498051200840][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:43:53][350498051200840][303 ms][DEBUG] check_frida: running
[2025-08-20 22:43:53][350498051200840][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-20 22:43:53][350498051200840][304 ms][DEBUG] START check_scloud
[2025-08-20 22:43:53][350498051200840][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:43:54][350498051200840][600 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23626816 73764 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:43:54][350498051200840][600 ms][DEBUG] targetPkg: running
[2025-08-20 22:43:54][350498051200840][600 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:43:54][350498051200840][600 ms][DEBUG] rawBody.length=1161
[2025-08-20 22:43:54][350498051200840][600 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDUxMjAwODQwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RCMTZDMUtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU0NiJ9'" -e "main()" -q"
[2025-08-20 22:43:54][350498051200840][600 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:43:54][350498051200840][600 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNDk4MDUxMjAwODQwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RCMTZDMUtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU0NiJ9'" -e "main()" -q"
[2025-08-20 22:43:56][350498051200840][3209 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNDk4MDUxMjAwODQwIiwibW9kZWwiOiJTTS1BNTM2QiIsInByb2ZpbGVfSUQiOiI2ODdhMGE0NjJhMmVjMjFlZmUzMGRhZWMiLCJncm91cCI6ImY5OWVmMWNiLTE1NTEtNDNhZC1iNjlkLWE4NzZiYTIzOTZjNSIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1RCMTZDMUtBIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJFVUIiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDODU0NiJ9"\r\n
[2025-08-20 22:43:58][350498051200840][5318 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50cafdab-30cd-410c-af01-3d29e19a0ab7","id":"QR_50cafdab-30cd-410c-af01-3d29e19a0ab7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:43:58][350498051200840][5318 ms][DEBUG] proc_open done in 4718 ms; code=0; res.len=3152
[2025-08-20 22:43:58][350498051200840][5318 ms][DEBUG] END   runCmdUntilRes#1 in 4718 ms
[2025-08-20 22:43:58][350498051200840][5318 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:45:09][357042149320310][1 ms][INFO] === Request start ===
[2025-08-20 22:45:09][357042149320310][2 ms][DEBUG] START check_frida
[2025-08-20 22:45:09][357042149320310][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:45:09][357042149320310][264 ms][DEBUG] SU: done in 262 ms; outroot         20950     1 2263084   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:45:09][357042149320310][264 ms][DEBUG] check_frida: running
[2025-08-20 22:45:09][357042149320310][264 ms][DEBUG] END   check_frida in 262 ms
[2025-08-20 22:45:09][357042149320310][264 ms][DEBUG] START check_scloud
[2025-08-20 22:45:09][357042149320310][264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:45:09][357042149320310][576 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23626848 74304 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:45:09][357042149320310][576 ms][DEBUG] targetPkg: running
[2025-08-20 22:45:09][357042149320310][576 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-20 22:45:09][357042149320310][576 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:45:09][357042149320310][577 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ5MzIwMzEwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTEzN0NKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODI3In0='" -e "main()" -q"
[2025-08-20 22:45:09][357042149320310][577 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:45:09][357042149320310][577 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ5MzIwMzEwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTEzN0NKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODI3In0='" -e "main()" -q"
[2025-08-20 22:45:12][357042149320310][3216 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDQyMTQ5MzIwMzEwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTEzN0NKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODI3In0="\r\n
[2025-08-20 22:45:25][357042149320310][16541 ms][DEBUG] proc_open done in 15964 ms (timeout); code=0; out.len=0 err.len=11
[2025-08-20 22:45:25][357042149320310][16541 ms][DEBUG] END   runCmdUntilRes#1 in 15964 ms
[2025-08-20 22:45:25][357042149320310][16541 ms][ERROR] NO RESULT; code=124 out.len=0 err.len=11
[2025-08-20 22:45:27][][0 ms][DEBUG] START check_boot_completed
[2025-08-20 22:45:27][][0 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device
[2025-08-20 22:45:27][][37 ms][DEBUG] ADB: done in 37 ms; out
[2025-08-20 22:45:27][][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;"
[2025-08-20 22:45:27][][99 ms][DEBUG] SU: done in 62 ms; out
[2025-08-20 22:45:27][][99 ms][DEBUG] END   check_boot_completed in 99 ms
[2025-08-20 22:45:27][357042149320310][100 ms][INFO] === Request start ===
[2025-08-20 22:45:27][357042149320310][100 ms][DEBUG] START check_frida
[2025-08-20 22:45:27][357042149320310][100 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:45:28][357042149320310][396 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4464 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:45:28][357042149320310][396 ms][DEBUG] check_frida: running
[2025-08-20 22:45:28][357042149320310][396 ms][DEBUG] END   check_frida in 297 ms
[2025-08-20 22:45:28][357042149320310][396 ms][DEBUG] START check_scloud
[2025-08-20 22:45:28][357042149320310][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:45:28][357042149320310][693 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23626880 73928 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:45:28][357042149320310][693 ms][DEBUG] targetPkg: running
[2025-08-20 22:45:28][357042149320310][693 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:45:28][357042149320310][693 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:45:28][357042149320310][694 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ5MzIwMzEwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTEzN0NKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODI3In0='" -e "main()" -q"
[2025-08-20 22:45:28][357042149320310][694 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:45:28][357042149320310][694 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MDQyMTQ5MzIwMzEwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTEzN0NKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODI3In0='" -e "main()" -q"
[2025-08-20 22:45:30][357042149320310][3317 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MDQyMTQ5MzIwMzEwIiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTEzN0NKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxODI3In0="\r\n
[2025-08-20 22:45:32][357042149320310][5270 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68a9513b-6e4b-4fd5-8db7-51051844d7e0","id":"QR_68a9513b-6e4b-4fd5-8db7-51051844d7e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:45:32][357042149320310][5270 ms][DEBUG] proc_open done in 4576 ms; code=0; res.len=3152
[2025-08-20 22:45:32][357042149320310][5270 ms][DEBUG] END   runCmdUntilRes#1 in 4576 ms
[2025-08-20 22:45:32][357042149320310][5270 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:45:46][352610712565951][0 ms][INFO] === Request start ===
[2025-08-20 22:45:46][352610712565951][1 ms][DEBUG] START check_frida
[2025-08-20 22:45:46][352610712565951][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:45:46][352610712565951][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:45:46][352610712565951][303 ms][DEBUG] check_frida: running
[2025-08-20 22:45:46][352610712565951][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-20 22:45:46][352610712565951][303 ms][DEBUG] START check_scloud
[2025-08-20 22:45:46][352610712565951][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:45:46][352610712565951][615 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23626912 74472 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:45:46][352610712565951][615 ms][DEBUG] targetPkg: running
[2025-08-20 22:45:46][352610712565951][615 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-20 22:45:46][352610712565951][615 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:45:46][352610712565951][615 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjEwNzEyNTY1OTUxIiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hDMTA1NDlMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDYyIn0='" -e "main()" -q"
[2025-08-20 22:45:46][352610712565951][615 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:45:46][352610712565951][615 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNjEwNzEyNTY1OTUxIiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hDMTA1NDlMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDYyIn0='" -e "main()" -q"
[2025-08-20 22:45:49][352610712565951][3224 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNjEwNzEyNTY1OTUxIiwibW9kZWwiOiJTTS1BMzU2VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1hDMTA1NDlMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlhBQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMDYyIn0="\r\n
[2025-08-20 22:45:52][352610712565951][6333 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45092848-f2b2-472e-a62d-cc5fac8cfae4","id":"QR_45092848-f2b2-472e-a62d-cc5fac8cfae4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:45:52][352610712565951][6333 ms][DEBUG] proc_open done in 5718 ms; code=0; res.len=3152
[2025-08-20 22:45:52][352610712565951][6333 ms][DEBUG] END   runCmdUntilRes#1 in 5718 ms
[2025-08-20 22:45:52][352610712565951][6333 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:50:08][353548751584278][1 ms][INFO] === Request start ===
[2025-08-20 22:50:08][353548751584278][2 ms][DEBUG] START check_frida
[2025-08-20 22:50:08][353548751584278][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:50:08][353548751584278][303 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:50:08][353548751584278][303 ms][DEBUG] check_frida: running
[2025-08-20 22:50:08][353548751584278][303 ms][DEBUG] END   check_frida in 302 ms
[2025-08-20 22:50:08][353548751584278][303 ms][DEBUG] START check_internet
[2025-08-20 22:50:08][353548751584278][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 22:50:08][353548751584278][803 ms][DEBUG] SU: done in 500 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.696/202.696/202.696/0.000 ms\n
[2025-08-20 22:50:08][353548751584278][803 ms][DEBUG] check_internet: online
[2025-08-20 22:50:08][353548751584278][803 ms][DEBUG] END   check_internet in 500 ms
[2025-08-20 22:50:08][353548751584278][803 ms][DEBUG] START check_scloud
[2025-08-20 22:50:08][353548751584278][803 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:50:09][353548751584278][1069 ms][DEBUG] SU: done in 266 ms; outu0_a118      20979 10674 23626944 73836 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:50:09][353548751584278][1069 ms][DEBUG] targetPkg: running
[2025-08-20 22:50:09][353548751584278][1069 ms][DEBUG] END   check_scloud in 266 ms
[2025-08-20 22:50:09][353548751584278][1069 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:50:09][353548751584278][1069 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTQ4NzUxNTg0Mjc4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MENOUzNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU1In0='" -e "main()" -q"
[2025-08-20 22:50:09][353548751584278][1069 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:50:09][353548751584278][1069 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzNTQ4NzUxNTg0Mjc4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MENOUzNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU1In0='" -e "main()" -q"
[2025-08-20 22:50:11][353548751584278][3662 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzNTQ4NzUxNTg0Mjc4IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g2MENOUzNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkdUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NTU1In0="\r\n
[2025-08-20 22:50:14][353548751584278][6833 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf08f141-98f9-4e2a-a530-b259b636ea59","id":"QR_cf08f141-98f9-4e2a-a530-b259b636ea59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:50:14][353548751584278][6833 ms][DEBUG] proc_open done in 5764 ms; code=0; res.len=3152
[2025-08-20 22:50:14][353548751584278][6833 ms][DEBUG] END   runCmdUntilRes#1 in 5764 ms
[2025-08-20 22:50:14][353548751584278][6833 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:51:37][357651712308310][0 ms][INFO] === Request start ===
[2025-08-20 22:51:37][357651712308310][1 ms][DEBUG] START check_frida
[2025-08-20 22:51:37][357651712308310][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:51:37][357651712308310][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:51:37][357651712308310][309 ms][DEBUG] check_frida: running
[2025-08-20 22:51:37][357651712308310][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-20 22:51:37][357651712308310][309 ms][DEBUG] START check_scloud
[2025-08-20 22:51:37][357651712308310][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:51:37][357651712308310][606 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23626976 74612 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:51:37][357651712308310][606 ms][DEBUG] targetPkg: running
[2025-08-20 22:51:37][357651712308310][606 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:51:37][357651712308310][606 ms][DEBUG] rawBody.length=1161
[2025-08-20 22:51:37][357651712308310][606 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzEyMzA4MzEwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MEVKTkRLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3MSJ9'" -e "main()" -q"
[2025-08-20 22:51:37][357651712308310][606 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:51:37][357651712308310][606 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzEyMzA4MzEwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MEVKTkRLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3MSJ9'" -e "main()" -q"
[2025-08-20 22:51:40][357651712308310][3230 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzEyMzA4MzEwIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ1MEVKTkRLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJaVE8iLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjQ3MSJ9"\r\n
[2025-08-20 22:51:42][357651712308310][5480 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f43729d5-9057-418f-b4cd-c3926e73b8d7","id":"QR_f43729d5-9057-418f-b4cd-c3926e73b8d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:51:42][357651712308310][5480 ms][DEBUG] proc_open done in 4873 ms; code=0; res.len=3152
[2025-08-20 22:51:42][357651712308310][5480 ms][DEBUG] END   runCmdUntilRes#1 in 4873 ms
[2025-08-20 22:51:42][357651712308310][5480 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 22:53:22][352177395356595][1 ms][INFO] === Request start ===
[2025-08-20 22:53:22][352177395356595][2 ms][DEBUG] START check_frida
[2025-08-20 22:53:22][352177395356595][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 22:53:22][352177395356595][312 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2263084   4488 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 22:53:22][352177395356595][312 ms][DEBUG] check_frida: running
[2025-08-20 22:53:22][352177395356595][312 ms][DEBUG] END   check_frida in 311 ms
[2025-08-20 22:53:22][352177395356595][312 ms][DEBUG] START check_scloud
[2025-08-20 22:53:22][352177395356595][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 22:53:22][352177395356595][609 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23627008 74416 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 22:53:22][352177395356595][609 ms][DEBUG] targetPkg: running
[2025-08-20 22:53:22][352177395356595][609 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 22:53:22][352177395356595][609 ms][DEBUG] rawBody.length=1160
[2025-08-20 22:53:22][352177395356595][609 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3Mzk1MzU2NTk1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQzMDhFQ1FOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTYwIn0='" -e "main()" -q"
[2025-08-20 22:53:22][352177395356595][609 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 22:53:22][352177395356595][609 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMTc3Mzk1MzU2NTk1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQzMDhFQ1FOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTYwIn0='" -e "main()" -q"
[2025-08-20 22:53:25][352177395356595][3202 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMTc3Mzk1MzU2NTk1IiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROFQzMDhFQ1FOIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MTYwIn0="\r\n
[2025-08-20 22:53:33][352177395356595][11653 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c33a5a0-7fa9-4f56-87bb-d1e9e24ca2ff","id":"QR_3c33a5a0-7fa9-4f56-87bb-d1e9e24ca2ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 22:53:33][352177395356595][11653 ms][DEBUG] proc_open done in 11044 ms; code=0; res.len=3152
[2025-08-20 22:53:33][352177395356595][11653 ms][DEBUG] END   runCmdUntilRes#1 in 11044 ms
[2025-08-20 22:53:33][352177395356595][11653 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:01:36][357651718446452][0 ms][INFO] === Request start ===
[2025-08-20 23:01:36][357651718446452][0 ms][DEBUG] START check_frida
[2025-08-20 23:01:36][357651718446452][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:01:37][357651718446452][310 ms][DEBUG] SU: done in 310 ms; outroot         20950     1 2262072   4472 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:01:37][357651718446452][310 ms][DEBUG] check_frida: running
[2025-08-20 23:01:37][357651718446452][310 ms][DEBUG] END   check_frida in 310 ms
[2025-08-20 23:01:37][357651718446452][310 ms][DEBUG] START check_scloud
[2025-08-20 23:01:37][357651718446452][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:01:37][357651718446452][591 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23609556 74156 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:01:37][357651718446452][591 ms][DEBUG] targetPkg: running
[2025-08-20 23:01:37][357651718446452][591 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 23:01:37][357651718446452][592 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:01:37][357651718446452][592 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE4NDQ2NDUyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ5MDNHTDhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzIxIn0='" -e "main()" -q"
[2025-08-20 23:01:37][357651718446452][592 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:01:37][357651718446452][592 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NjUxNzE4NDQ2NDUyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ5MDNHTDhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzIxIn0='" -e "main()" -q"
[2025-08-20 23:01:39][357651718446452][3200 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NjUxNzE4NDQ2NDUyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQ5MDNHTDhFIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxMzIxIn0="\r\n
[2025-08-20 23:01:43][357651718446452][7059 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de8f7f3f-df1c-4696-b680-03aaf81fd6af","id":"QR_de8f7f3f-df1c-4696-b680-03aaf81fd6af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:01:43][357651718446452][7059 ms][DEBUG] proc_open done in 6467 ms; code=0; res.len=3152
[2025-08-20 23:01:43][357651718446452][7059 ms][DEBUG] END   runCmdUntilRes#1 in 6467 ms
[2025-08-20 23:01:43][357651718446452][7059 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:08:04][354747953097282][1 ms][INFO] === Request start ===
[2025-08-20 23:08:04][354747953097282][2 ms][DEBUG] START check_frida
[2025-08-20 23:08:04][354747953097282][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:08:05][354747953097282][301 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2263084   4448 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:08:05][354747953097282][301 ms][DEBUG] check_frida: running
[2025-08-20 23:08:05][354747953097282][301 ms][DEBUG] END   check_frida in 299 ms
[2025-08-20 23:08:05][354747953097282][301 ms][DEBUG] START check_internet
[2025-08-20 23:08:05][354747953097282][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:08:05][354747953097282][847 ms][DEBUG] SU: done in 546 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.868/202.868/202.868/0.000 ms\n
[2025-08-20 23:08:05][354747953097282][847 ms][DEBUG] check_internet: online
[2025-08-20 23:08:05][354747953097282][847 ms][DEBUG] END   check_internet in 547 ms
[2025-08-20 23:08:05][354747953097282][847 ms][DEBUG] START check_scloud
[2025-08-20 23:08:05][354747953097282][847 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:08:06][354747953097282][1128 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23609588 75100 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:08:06][354747953097282][1128 ms][DEBUG] targetPkg: running
[2025-08-20 23:08:06][354747953097282][1128 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 23:08:06][354747953097282][1128 ms][DEBUG] rawBody.length=1161
[2025-08-20 23:08:06][354747953097282][1129 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzMDk3MjgyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDMxMUJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwMyJ9'" -e "main()" -q"
[2025-08-20 23:08:06][354747953097282][1129 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:08:06][354747953097282][1129 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NzQ3OTUzMDk3MjgyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDMxMUJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwMyJ9'" -e "main()" -q"
[2025-08-20 23:08:08][354747953097282][3768 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NzQ3OTUzMDk3MjgyIiwibW9kZWwiOiJTTS1BMTU1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFg2MDMxMUJNIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJNRUEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNSIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzEwMyJ9"\r\n
[2025-08-20 23:08:10][354747953097282][5815 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe348c56-5c2f-4a03-8304-68c1d17c618c","id":"QR_fe348c56-5c2f-4a03-8304-68c1d17c618c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:08:10][354747953097282][5815 ms][DEBUG] proc_open done in 4687 ms; code=0; res.len=3152
[2025-08-20 23:08:10][354747953097282][5815 ms][DEBUG] END   runCmdUntilRes#1 in 4687 ms
[2025-08-20 23:08:10][354747953097282][5816 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:15:08][354952833221520][1 ms][INFO] === Request start ===
[2025-08-20 23:15:08][354952833221520][2 ms][DEBUG] START check_frida
[2025-08-20 23:15:08][354952833221520][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:15:08][354952833221520][300 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2263084   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:15:08][354952833221520][300 ms][DEBUG] check_frida: running
[2025-08-20 23:15:08][354952833221520][300 ms][DEBUG] END   check_frida in 299 ms
[2025-08-20 23:15:08][354952833221520][300 ms][DEBUG] START check_scloud
[2025-08-20 23:15:08][354952833221520][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:15:08][354952833221520][597 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23609620 74680 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:15:08][354952833221520][597 ms][DEBUG] targetPkg: running
[2025-08-20 23:15:08][354952833221520][597 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 23:15:08][354952833221520][597 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:15:08][354952833221520][597 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTUyODMzMjIxNTIwIiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE45MDJBSDdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDA1In0='" -e "main()" -q"
[2025-08-20 23:15:08][354952833221520][597 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:15:08][354952833221520][597 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0OTUyODMzMjIxNTIwIiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE45MDJBSDdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDA1In0='" -e "main()" -q"
[2025-08-20 23:15:11][354952833221520][3206 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0OTUyODMzMjIxNTIwIiwibW9kZWwiOiJTTS1BMjE3TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJROE45MDJBSDdaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDA1In0="\r\n
[2025-08-20 23:15:16][354952833221520][7908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc17dc14-89cb-4236-b1ea-5bf496598e89","id":"QR_cc17dc14-89cb-4236-b1ea-5bf496598e89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:15:16][354952833221520][7908 ms][DEBUG] proc_open done in 7311 ms; code=0; res.len=3152
[2025-08-20 23:15:16][354952833221520][7908 ms][DEBUG] END   runCmdUntilRes#1 in 7311 ms
[2025-08-20 23:15:16][354952833221520][7908 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:15:35][350962634234584][1 ms][INFO] === Request start ===
[2025-08-20 23:15:35][350962634234584][2 ms][DEBUG] START check_frida
[2025-08-20 23:15:35][350962634234584][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:15:36][350962634234584][287 ms][DEBUG] SU: done in 286 ms; outroot         20950     1 2263084   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:15:36][350962634234584][287 ms][DEBUG] check_frida: running
[2025-08-20 23:15:36][350962634234584][287 ms][DEBUG] END   check_frida in 286 ms
[2025-08-20 23:15:36][350962634234584][287 ms][DEBUG] START check_scloud
[2025-08-20 23:15:36][350962634234584][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:15:36][350962634234584][521 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23627136 73828 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:15:36][350962634234584][521 ms][DEBUG] targetPkg: running
[2025-08-20 23:15:36][350962634234584][522 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 23:15:36][350962634234584][522 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:15:36][350962634234584][522 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYyNjM0MjM0NTg0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MFpWTVFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDEwIn0='" -e "main()" -q"
[2025-08-20 23:15:36][350962634234584][522 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:15:36][350962634234584][522 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwOTYyNjM0MjM0NTg0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MFpWTVFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDEwIn0='" -e "main()" -q"
[2025-08-20 23:15:39][350962634234584][3177 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwOTYyNjM0MjM0NTg0IiwibW9kZWwiOiJTTS1BNTQ2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1c0MFpWTVFEIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzMDEwIn0="\r\n
[2025-08-20 23:15:42][350962634234584][6223 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf42c98f-9864-4ded-8097-ad9955c8e8ed","id":"QR_bf42c98f-9864-4ded-8097-ad9955c8e8ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:15:42][350962634234584][6223 ms][DEBUG] proc_open done in 5701 ms; code=0; res.len=3152
[2025-08-20 23:15:42][350962634234584][6223 ms][DEBUG] END   runCmdUntilRes#1 in 5701 ms
[2025-08-20 23:15:42][350962634234584][6223 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:17:09][352231110957599][0 ms][INFO] === Request start ===
[2025-08-20 23:17:09][352231110957599][1 ms][DEBUG] START check_frida
[2025-08-20 23:17:09][352231110957599][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:17:10][352231110957599][268 ms][DEBUG] SU: done in 266 ms; outroot         20950     1 2263084   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:17:10][352231110957599][268 ms][DEBUG] check_frida: running
[2025-08-20 23:17:10][352231110957599][268 ms][DEBUG] END   check_frida in 267 ms
[2025-08-20 23:17:10][352231110957599][268 ms][DEBUG] START check_scloud
[2025-08-20 23:17:10][352231110957599][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:17:10][352231110957599][502 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23627168 74372 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:17:10][352231110957599][502 ms][DEBUG] targetPkg: running
[2025-08-20 23:17:10][352231110957599][502 ms][DEBUG] END   check_scloud in 235 ms
[2025-08-20 23:17:10][352231110957599][503 ms][DEBUG] rawBody.length=1159
[2025-08-20 23:17:10][352231110957599][503 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjMxMTEwOTU3NTk5IiwibW9kZWwiOiJTTS1QNjEzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVEEwOUgwWEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzM1NDMifQ=='" -e "main()" -q"
[2025-08-20 23:17:10][352231110957599][503 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:17:10][352231110957599][503 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjMxMTEwOTU3NTk5IiwibW9kZWwiOiJTTS1QNjEzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVEEwOUgwWEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzM1NDMifQ=='" -e "main()" -q"
[2025-08-20 23:17:12][352231110957599][3110 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjMxMTEwOTU3NTk5IiwibW9kZWwiOiJTTS1QNjEzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyVEEwOUgwWEEiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ0hPIiwib3MiOiIxMSIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzM1NDMifQ=="\r\n
[2025-08-20 23:17:16][352231110957599][6516 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55d76128-bbbd-4e4a-909a-ddbe7e190ead","id":"QR_55d76128-bbbd-4e4a-909a-ddbe7e190ead","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:17:16][352231110957599][6517 ms][DEBUG] proc_open done in 6014 ms; code=0; res.len=3152
[2025-08-20 23:17:16][352231110957599][6517 ms][DEBUG] END   runCmdUntilRes#1 in 6014 ms
[2025-08-20 23:17:16][352231110957599][6517 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:18:05][352053264003487][1 ms][INFO] === Request start ===
[2025-08-20 23:18:05][352053264003487][2 ms][DEBUG] START check_frida
[2025-08-20 23:18:05][352053264003487][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:18:05][352053264003487][299 ms][DEBUG] SU: done in 297 ms; outroot         20950     1 2263084   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:18:05][352053264003487][299 ms][DEBUG] check_frida: running
[2025-08-20 23:18:05][352053264003487][299 ms][DEBUG] END   check_frida in 297 ms
[2025-08-20 23:18:05][352053264003487][299 ms][DEBUG] START check_internet
[2025-08-20 23:18:05][352053264003487][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:18:05][352053264003487][720 ms][DEBUG] SU: done in 421 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.678/201.678/201.678/0.000 ms\n
[2025-08-20 23:18:05][352053264003487][720 ms][DEBUG] check_internet: online
[2025-08-20 23:18:05][352053264003487][720 ms][DEBUG] END   check_internet in 421 ms
[2025-08-20 23:18:05][352053264003487][720 ms][DEBUG] START check_scloud
[2025-08-20 23:18:05][352053264003487][720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:18:06][352053264003487][970 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23627200 73740 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:18:06][352053264003487][970 ms][DEBUG] targetPkg: running
[2025-08-20 23:18:06][352053264003487][970 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 23:18:06][352053264003487][970 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:18:06][352053264003487][970 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDUzMjY0MDAzNDg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MFI4OTdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODU2In0='" -e "main()" -q"
[2025-08-20 23:18:06][352053264003487][970 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:18:06][352053264003487][971 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDUzMjY0MDAzNDg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MFI4OTdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODU2In0='" -e "main()" -q"
[2025-08-20 23:18:06][351460455658485][0 ms][INFO] === Request start ===
[2025-08-20 23:18:08][352053264003487][3594 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDUzMjY0MDAzNDg3IiwibW9kZWwiOiJTTS1BNTU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJaQ1g1MFI4OTdQIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM0ODU2In0="\r\n
[2025-08-20 23:18:12][352053264003487][7656 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6925fd5c-b4dc-4183-b069-024fc7c9b6a9","id":"QR_6925fd5c-b4dc-4183-b069-024fc7c9b6a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:18:12][352053264003487][7657 ms][DEBUG] proc_open done in 6686 ms; code=0; res.len=3152
[2025-08-20 23:18:12][352053264003487][7657 ms][DEBUG] END   runCmdUntilRes#1 in 6686 ms
[2025-08-20 23:18:12][352053264003487][7657 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:18:13][351460455658485][7104 ms][DEBUG] START check_frida
[2025-08-20 23:18:13][351460455658485][7104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:18:13][351460455658485][7416 ms][DEBUG] SU: done in 312 ms; outroot         20950     1 2279504   4484 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:18:13][351460455658485][7416 ms][DEBUG] check_frida: running
[2025-08-20 23:18:13][351460455658485][7416 ms][DEBUG] END   check_frida in 313 ms
[2025-08-20 23:18:13][351460455658485][7416 ms][DEBUG] START check_internet
[2025-08-20 23:18:13][351460455658485][7416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:18:14][351460455658485][7697 ms][DEBUG] SU: done in 281 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.133/186.133/186.133/0.000 ms\n
[2025-08-20 23:18:14][351460455658485][7697 ms][DEBUG] check_internet: online
[2025-08-20 23:18:14][351460455658485][7697 ms][DEBUG] END   check_internet in 281 ms
[2025-08-20 23:18:14][351460455658485][7697 ms][DEBUG] START check_scloud
[2025-08-20 23:18:14][351460455658485][7697 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:18:14][351460455658485][7994 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23627232 74300 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:18:14][351460455658485][7994 ms][DEBUG] targetPkg: running
[2025-08-20 23:18:14][351460455658485][7994 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 23:18:14][351460455658485][7994 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:18:14][351460455658485][7994 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDYwNDU1NjU4NDg1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTQ2SzBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNTM4In0='" -e "main()" -q"
[2025-08-20 23:18:14][351460455658485][7994 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:18:14][351460455658485][7995 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNDYwNDU1NjU4NDg1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTQ2SzBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNTM4In0='" -e "main()" -q"
[2025-08-20 23:18:16][351460455658485][10603 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNDYwNDU1NjU4NDg1IiwibW9kZWwiOiJTTS1BMTU2TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g5MTQ2SzBaIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyNTM4In0="\r\n
[2025-08-20 23:18:20][351460455658485][14336 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73e61547-cde0-48ff-9d7c-54f19a1ab920","id":"QR_73e61547-cde0-48ff-9d7c-54f19a1ab920","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:18:20][351460455658485][14336 ms][DEBUG] proc_open done in 6342 ms; code=0; res.len=3152
[2025-08-20 23:18:20][351460455658485][14336 ms][DEBUG] END   runCmdUntilRes#1 in 6342 ms
[2025-08-20 23:18:20][351460455658485][14336 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:20:15][357526616947068][1 ms][INFO] === Request start ===
[2025-08-20 23:20:15][357526616947068][2 ms][DEBUG] START check_frida
[2025-08-20 23:20:15][357526616947068][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:20:15][357526616947068][304 ms][DEBUG] SU: done in 302 ms; outroot         20950     1 2263084   4416 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:20:15][357526616947068][304 ms][DEBUG] check_frida: running
[2025-08-20 23:20:15][357526616947068][304 ms][DEBUG] END   check_frida in 302 ms
[2025-08-20 23:20:15][357526616947068][304 ms][DEBUG] START check_internet
[2025-08-20 23:20:15][357526616947068][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:20:15][357526616947068][616 ms][DEBUG] SU: done in 312 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.133/223.133/223.133/0.000 ms\n
[2025-08-20 23:20:15][357526616947068][616 ms][DEBUG] check_internet: online
[2025-08-20 23:20:15][357526616947068][616 ms][DEBUG] END   check_internet in 312 ms
[2025-08-20 23:20:15][357526616947068][616 ms][DEBUG] START check_scloud
[2025-08-20 23:20:15][357526616947068][616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:20:16][357526616947068][913 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23627264 73572 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:20:16][357526616947068][913 ms][DEBUG] targetPkg: running
[2025-08-20 23:20:16][357526616947068][913 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 23:20:16][357526616947068][913 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:20:16][357526616947068][913 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTI2NjE2OTQ3MDY4IiwibW9kZWwiOiJTTS1BNTI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQyMDk2Mk5MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDY5In0='" -e "main()" -q"
[2025-08-20 23:20:16][357526616947068][913 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:20:16][357526616947068][913 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTI2NjE2OTQ3MDY4IiwibW9kZWwiOiJTTS1BNTI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQyMDk2Mk5MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDY5In0='" -e "main()" -q"
[2025-08-20 23:20:18][357526616947068][3490 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTI2NjE2OTQ3MDY4IiwibW9kZWwiOiJTTS1BNTI1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlJYOFQyMDk2Mk5MIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlpUTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM2IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMzNDY5In0="\r\n
[2025-08-20 23:20:23][357526616947068][7974 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01c05b63-7bfc-4bc3-bdd4-3334de1b6a7c","id":"QR_01c05b63-7bfc-4bc3-bdd4-3334de1b6a7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:20:23][357526616947068][7974 ms][DEBUG] proc_open done in 7061 ms; code=0; res.len=3152
[2025-08-20 23:20:23][357526616947068][7974 ms][DEBUG] END   runCmdUntilRes#1 in 7061 ms
[2025-08-20 23:20:23][357526616947068][7974 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:22:20][354486117226855][1 ms][INFO] === Request start ===
[2025-08-20 23:22:20][354486117226855][2 ms][DEBUG] START check_frida
[2025-08-20 23:22:20][354486117226855][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:22:21][354486117226855][296 ms][DEBUG] SU: done in 295 ms; outroot         20950     1 2262072   4452 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:22:21][354486117226855][296 ms][DEBUG] check_frida: running
[2025-08-20 23:22:21][354486117226855][296 ms][DEBUG] END   check_frida in 295 ms
[2025-08-20 23:22:21][354486117226855][296 ms][DEBUG] START check_internet
[2025-08-20 23:22:21][354486117226855][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:22:21][354486117226855][578 ms][DEBUG] SU: done in 281 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.394/187.394/187.394/0.000 ms\n
[2025-08-20 23:22:21][354486117226855][578 ms][DEBUG] check_internet: online
[2025-08-20 23:22:21][354486117226855][578 ms][DEBUG] END   check_internet in 282 ms
[2025-08-20 23:22:21][354486117226855][578 ms][DEBUG] START check_scloud
[2025-08-20 23:22:21][354486117226855][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:22:21][354486117226855][828 ms][DEBUG] SU: done in 250 ms; outu0_a118      20979 10674 23627296 74156 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:22:21][354486117226855][828 ms][DEBUG] targetPkg: running
[2025-08-20 23:22:21][354486117226855][828 ms][DEBUG] END   check_scloud in 250 ms
[2025-08-20 23:22:21][354486117226855][828 ms][DEBUG] rawBody.length=1161
[2025-08-20 23:22:21][354486117226855][828 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDg2MTE3MjI2ODU1IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMEw4OEhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCVFUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI3MCJ9'" -e "main()" -q"
[2025-08-20 23:22:21][354486117226855][828 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:22:21][354486117226855][828 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0NDg2MTE3MjI2ODU1IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMEw4OEhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCVFUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI3MCJ9'" -e "main()" -q"
[2025-08-20 23:22:24][354486117226855][3467 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0NDg2MTE3MjI2ODU1IiwibW9kZWwiOiJTTS1BNzE1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOE5CMEw4OEhKIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJCVFUiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDOTI3MCJ9"\r\n
[2025-08-20 23:22:26][354486117226855][5779 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cedb0fa2-0d48-4024-9cfd-ecc442a77619","id":"QR_cedb0fa2-0d48-4024-9cfd-ecc442a77619","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:22:26][354486117226855][5780 ms][DEBUG] proc_open done in 4951 ms; code=0; res.len=3152
[2025-08-20 23:22:26][354486117226855][5780 ms][DEBUG] END   runCmdUntilRes#1 in 4951 ms
[2025-08-20 23:22:26][354486117226855][5780 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:35:14][352469859901424][1 ms][INFO] === Request start ===
[2025-08-20 23:35:14][352469859901424][2 ms][DEBUG] START check_frida
[2025-08-20 23:35:14][352469859901424][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:35:14][352469859901424][295 ms][DEBUG] SU: done in 293 ms; outroot         20950     1 2262072   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:35:14][352469859901424][295 ms][DEBUG] check_frida: running
[2025-08-20 23:35:14][352469859901424][295 ms][DEBUG] END   check_frida in 294 ms
[2025-08-20 23:35:14][352469859901424][295 ms][DEBUG] START check_scloud
[2025-08-20 23:35:14][352469859901424][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:35:14][352469859901424][578 ms][DEBUG] SU: done in 283 ms; outu0_a118      20979 10674 23609844 74816 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:35:14][352469859901424][579 ms][DEBUG] targetPkg: running
[2025-08-20 23:35:14][352469859901424][579 ms][DEBUG] END   check_scloud in 283 ms
[2025-08-20 23:35:14][352469859901424][579 ms][DEBUG] rawBody.length=1161
[2025-08-20 23:35:14][352469859901424][579 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU5OTAxNDI0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ4MFBDWEhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg3NCJ9'" -e "main()" -q"
[2025-08-20 23:35:14][352469859901424][579 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:35:14][352469859901424][579 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyNDY5ODU5OTAxNDI0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ4MFBDWEhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg3NCJ9'" -e "main()" -q"
[2025-08-20 23:35:17][352469859901424][3216 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyNDY5ODU5OTAxNDI0IiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFQ4MFBDWEhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJYWFYiLCJvcyI6IjExIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMzg3NCJ9"\r\n
[2025-08-20 23:35:19][352469859901424][5435 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d5b1dc3-cfcf-4186-a6c0-6bd115a24850","id":"QR_6d5b1dc3-cfcf-4186-a6c0-6bd115a24850","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:35:19][352469859901424][5435 ms][DEBUG] proc_open done in 4856 ms; code=0; res.len=3152
[2025-08-20 23:35:19][352469859901424][5435 ms][DEBUG] END   runCmdUntilRes#1 in 4856 ms
[2025-08-20 23:35:19][352469859901424][5435 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:36:36][357576774065260][1 ms][INFO] === Request start ===
[2025-08-20 23:36:36][357576774065260][2 ms][DEBUG] START check_frida
[2025-08-20 23:36:36][357576774065260][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:36:36][357576774065260][311 ms][DEBUG] SU: done in 309 ms; outroot         20950     1 2263084   4496 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:36:36][357576774065260][311 ms][DEBUG] check_frida: running
[2025-08-20 23:36:36][357576774065260][311 ms][DEBUG] END   check_frida in 310 ms
[2025-08-20 23:36:36][357576774065260][311 ms][DEBUG] START check_internet
[2025-08-20 23:36:36][357576774065260][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:36:36][357576774065260][764 ms][DEBUG] SU: done in 453 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.285/201.285/201.285/0.000 ms\n
[2025-08-20 23:36:36][357576774065260][764 ms][DEBUG] check_internet: online
[2025-08-20 23:36:36][357576774065260][765 ms][DEBUG] END   check_internet in 453 ms
[2025-08-20 23:36:36][357576774065260][765 ms][DEBUG] START check_scloud
[2025-08-20 23:36:36][357576774065260][765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:36:37][357576774065260][1045 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23627360 74112 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:36:37][357576774065260][1045 ms][DEBUG] targetPkg: running
[2025-08-20 23:36:37][357576774065260][1045 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 23:36:37][357576774065260][1045 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:36:37][357576774065260][1045 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc0MDY1MjYwIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MUZQTlNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjQwIn0='" -e "main()" -q"
[2025-08-20 23:36:37][357576774065260][1045 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:36:37][357576774065260][1045 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2Nzc0MDY1MjYwIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MUZQTlNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjQwIn0='" -e "main()" -q"
[2025-08-20 23:36:39][357576774065260][3685 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2Nzc0MDY1MjYwIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g3MUZQTlNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTAiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMyMjQwIn0="\r\n
[2025-08-20 23:36:44][357576774065260][8731 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_779f2731-70c0-4afd-ac40-49df739bfe42","id":"QR_779f2731-70c0-4afd-ac40-49df739bfe42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:36:44][357576774065260][8731 ms][DEBUG] proc_open done in 7686 ms; code=0; res.len=3152
[2025-08-20 23:36:44][357576774065260][8731 ms][DEBUG] END   runCmdUntilRes#1 in 7686 ms
[2025-08-20 23:36:44][357576774065260][8731 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:38:09][357576772712111][0 ms][INFO] === Request start ===
[2025-08-20 23:38:09][357576772712111][0 ms][DEBUG] START check_frida
[2025-08-20 23:38:09][357576772712111][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:38:09][357576772712111][284 ms][DEBUG] SU: done in 284 ms; outroot         20950     1 2263084   4504 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:38:09][357576772712111][284 ms][DEBUG] check_frida: running
[2025-08-20 23:38:09][357576772712111][284 ms][DEBUG] END   check_frida in 284 ms
[2025-08-20 23:38:09][357576772712111][284 ms][DEBUG] START check_internet
[2025-08-20 23:38:09][357576772712111][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:38:09][357576772712111][721 ms][DEBUG] SU: done in 436 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.628/200.628/200.628/0.000 ms\n
[2025-08-20 23:38:09][357576772712111][721 ms][DEBUG] check_internet: online
[2025-08-20 23:38:09][357576772712111][721 ms][DEBUG] END   check_internet in 436 ms
[2025-08-20 23:38:09][357576772712111][721 ms][DEBUG] START check_scloud
[2025-08-20 23:38:09][357576772712111][721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:38:10][357576772712111][1002 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23627392 74656 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:38:10][357576772712111][1002 ms][DEBUG] targetPkg: running
[2025-08-20 23:38:10][357576772712111][1002 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 23:38:10][357576772712111][1002 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:38:10][357576772712111][1002 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2NzcyNzEyMTExIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MlpLMjNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDgwIn0='" -e "main()" -q"
[2025-08-20 23:38:10][357576772712111][1002 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:38:10][357576772712111][1003 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3NTc2NzcyNzEyMTExIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MlpLMjNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDgwIn0='" -e "main()" -q"
[2025-08-20 23:38:12][357576772712111][3626 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3NTc2NzcyNzEyMTExIiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g1MlpLMjNZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IlRQQSIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM5NDgwIn0="\r\n
[2025-08-20 23:38:17][357576772712111][8172 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e21e7497-b85b-4bcb-a988-3f06edff0c2c","id":"QR_e21e7497-b85b-4bcb-a988-3f06edff0c2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:38:17][357576772712111][8172 ms][DEBUG] proc_open done in 7170 ms; code=0; res.len=3152
[2025-08-20 23:38:17][357576772712111][8172 ms][DEBUG] END   runCmdUntilRes#1 in 7170 ms
[2025-08-20 23:38:17][357576772712111][8172 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:39:10][351820741449884][1 ms][INFO] === Request start ===
[2025-08-20 23:39:10][351820741449884][2 ms][DEBUG] START check_frida
[2025-08-20 23:39:10][351820741449884][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:39:10][351820741449884][292 ms][DEBUG] SU: done in 291 ms; outroot         20950     1 2263084   4480 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:39:10][351820741449884][293 ms][DEBUG] check_frida: running
[2025-08-20 23:39:10][351820741449884][293 ms][DEBUG] END   check_frida in 291 ms
[2025-08-20 23:39:10][351820741449884][293 ms][DEBUG] START check_scloud
[2025-08-20 23:39:10][351820741449884][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:39:11][351820741449884][588 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23627424 74056 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:39:11][351820741449884][588 ms][DEBUG] targetPkg: running
[2025-08-20 23:39:11][351820741449884][588 ms][DEBUG] END   check_scloud in 296 ms
[2025-08-20 23:39:11][351820741449884][588 ms][DEBUG] rawBody.length=1159
[2025-08-20 23:39:11][351820741449884][589 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODIwNzQxNDQ5ODg0IiwibW9kZWwiOiJTTS1UNzMzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjgwTFk5QkwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIxNzEifQ=='" -e "main()" -q"
[2025-08-20 23:39:11][351820741449884][589 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:39:11][351820741449884][589 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxODIwNzQxNDQ5ODg0IiwibW9kZWwiOiJTTS1UNzMzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjgwTFk5QkwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIxNzEifQ=='" -e "main()" -q"
[2025-08-20 23:39:13][351820741449884][3213 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxODIwNzQxNDQ5ODg0IiwibW9kZWwiOiJTTS1UNzMzIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjUyUjgwTFk5QkwiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMCIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzYiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzIxNzEifQ=="\r\n
[2025-08-20 23:39:17][351820741449884][6759 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e0ba272-d66c-4358-940c-dc6a00e943d5","id":"QR_7e0ba272-d66c-4358-940c-dc6a00e943d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:39:17][351820741449884][6759 ms][DEBUG] proc_open done in 6170 ms; code=0; res.len=3152
[2025-08-20 23:39:17][351820741449884][6759 ms][DEBUG] END   runCmdUntilRes#1 in 6170 ms
[2025-08-20 23:39:17][351820741449884][6759 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:40:29][352037690194945][0 ms][INFO] === Request start ===
[2025-08-20 23:40:29][352037690194945][1 ms][DEBUG] START check_frida
[2025-08-20 23:40:29][352037690194945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:40:30][352037690194945][309 ms][DEBUG] SU: done in 308 ms; outroot         20950     1 2263084   4492 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:40:30][352037690194945][309 ms][DEBUG] check_frida: running
[2025-08-20 23:40:30][352037690194945][309 ms][DEBUG] END   check_frida in 308 ms
[2025-08-20 23:40:30][352037690194945][309 ms][DEBUG] START check_internet
[2025-08-20 23:40:30][352037690194945][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:40:30][352037690194945][590 ms][DEBUG] SU: done in 281 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.033/182.033/182.033/0.000 ms\n
[2025-08-20 23:40:30][352037690194945][591 ms][DEBUG] check_internet: online
[2025-08-20 23:40:30][352037690194945][591 ms][DEBUG] END   check_internet in 281 ms
[2025-08-20 23:40:30][352037690194945][591 ms][DEBUG] START check_scloud
[2025-08-20 23:40:30][352037690194945][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:40:30][352037690194945][887 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23627456 74884 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:40:30][352037690194945][887 ms][DEBUG] targetPkg: running
[2025-08-20 23:40:30][352037690194945][887 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 23:40:30][352037690194945][887 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:40:30][352037690194945][888 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDM3NjkwMTk0OTQ1IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMUhFRjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTQ3In0='" -e "main()" -q"
[2025-08-20 23:40:30][352037690194945][888 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:40:30][352037690194945][888 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMDM3NjkwMTk0OTQ1IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMUhFRjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTQ3In0='" -e "main()" -q"
[2025-08-20 23:40:33][352037690194945][3543 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMDM3NjkwMTk0OTQ1IiwibW9kZWwiOiJTTS1TNzIxQiIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMUhFRjBIIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4OTQ3In0="\r\n
[2025-08-20 23:40:36][352037690194945][6745 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef7db27a-c87e-4df2-ace8-c0414329b27c","id":"QR_ef7db27a-c87e-4df2-ace8-c0414329b27c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:40:36][352037690194945][6745 ms][DEBUG] proc_open done in 5858 ms; code=0; res.len=3152
[2025-08-20 23:40:36][352037690194945][6745 ms][DEBUG] END   runCmdUntilRes#1 in 5858 ms
[2025-08-20 23:40:36][352037690194945][6745 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:41:10][353244113973553][0 ms][INFO] === Request start ===
[2025-08-20 23:41:10][353244113973553][1 ms][DEBUG] START check_frida
[2025-08-20 23:41:10][353244113973553][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:41:10][353244113973553][249 ms][DEBUG] SU: done in 248 ms; outroot         20950     1 2263084   4500 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:41:10][353244113973553][249 ms][DEBUG] check_frida: running
[2025-08-20 23:41:10][353244113973553][249 ms][DEBUG] END   check_frida in 248 ms
[2025-08-20 23:41:10][353244113973553][249 ms][DEBUG] START check_scloud
[2025-08-20 23:41:10][353244113973553][249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:41:11][353244113973553][530 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23627488 74028 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:41:11][353244113973553][530 ms][DEBUG] targetPkg: running
[2025-08-20 23:41:11][353244113973553][530 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 23:41:11][353244113973553][530 ms][DEBUG] rawBody.length=1159
[2025-08-20 23:41:11][353244113973553][530 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ0MTEzOTczNTUzIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVEMwQlhQNFciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY5NTkifQ=='" -e "main()" -q"
[2025-08-20 23:41:11][353244113973553][530 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:41:11][353244113973553][530 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUzMjQ0MTEzOTczNTUzIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVEMwQlhQNFciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY5NTkifQ=='" -e "main()" -q"
[2025-08-20 23:41:13][353244113973553][3155 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUzMjQ0MTEzOTczNTUzIiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVEMwQlhQNFciLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiQ09PIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzAiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzY5NTkifQ=="\r\n
[2025-08-20 23:41:18][353244113973553][7513 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_094a3dcb-e8dc-40f6-aa0e-b1283e9d481f","id":"QR_094a3dcb-e8dc-40f6-aa0e-b1283e9d481f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:41:18][353244113973553][7513 ms][DEBUG] proc_open done in 6983 ms; code=0; res.len=3152
[2025-08-20 23:41:18][353244113973553][7513 ms][DEBUG] END   runCmdUntilRes#1 in 6983 ms
[2025-08-20 23:41:18][353244113973553][7513 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:41:29][350158864196284][1 ms][INFO] === Request start ===
[2025-08-20 23:41:29][350158864196284][2 ms][DEBUG] START check_frida
[2025-08-20 23:41:29][350158864196284][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:41:29][350158864196284][254 ms][DEBUG] SU: done in 252 ms; outroot         20950     1 2263084   4508 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:41:29][350158864196284][254 ms][DEBUG] check_frida: running
[2025-08-20 23:41:29][350158864196284][254 ms][DEBUG] END   check_frida in 253 ms
[2025-08-20 23:41:29][350158864196284][254 ms][DEBUG] START check_scloud
[2025-08-20 23:41:29][350158864196284][254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:41:29][350158864196284][551 ms][DEBUG] SU: done in 296 ms; outu0_a118      20979 10674 23627520 74624 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:41:29][350158864196284][551 ms][DEBUG] targetPkg: running
[2025-08-20 23:41:29][350158864196284][551 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 23:41:29][350158864196284][551 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:41:29][350158864196284][551 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTU4ODY0MTk2Mjg0IiwibW9kZWwiOiJTTS1YODI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mlk1MENZOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzE0In0='" -e "main()" -q"
[2025-08-20 23:41:29][350158864196284][551 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:41:29][350158864196284][551 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwMTU4ODY0MTk2Mjg0IiwibW9kZWwiOiJTTS1YODI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mlk1MENZOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzE0In0='" -e "main()" -q"
[2025-08-20 23:41:32][350158864196284][3175 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwMTU4ODY0MTk2Mjg0IiwibW9kZWwiOiJTTS1YODI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Mlk1MENZOTRUIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUMxNzE0In0="\r\n
[2025-08-20 23:41:35][350158864196284][5987 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e96cf4c0-9b62-4d6c-b4f6-3ac2deeec343","id":"QR_e96cf4c0-9b62-4d6c-b4f6-3ac2deeec343","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:41:35][350158864196284][5987 ms][DEBUG] proc_open done in 5436 ms; code=0; res.len=3152
[2025-08-20 23:41:35][350158864196284][5988 ms][DEBUG] END   runCmdUntilRes#1 in 5436 ms
[2025-08-20 23:41:35][350158864196284][5988 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:43:29][350762190044694][1 ms][INFO] === Request start ===
[2025-08-20 23:43:29][350762190044694][2 ms][DEBUG] START check_frida
[2025-08-20 23:43:29][350762190044694][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:43:29][350762190044694][306 ms][DEBUG] SU: done in 304 ms; outroot         20950     1 2263084   4460 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:43:29][350762190044694][306 ms][DEBUG] check_frida: running
[2025-08-20 23:43:29][350762190044694][306 ms][DEBUG] END   check_frida in 305 ms
[2025-08-20 23:43:29][350762190044694][306 ms][DEBUG] START check_scloud
[2025-08-20 23:43:29][350762190044694][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:43:30][350762190044694][603 ms][DEBUG] SU: done in 297 ms; outu0_a118      20979 10674 23627552 74224 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:43:30][350762190044694][603 ms][DEBUG] targetPkg: running
[2025-08-20 23:43:30][350762190044694][603 ms][DEBUG] END   check_scloud in 297 ms
[2025-08-20 23:43:30][350762190044694][603 ms][DEBUG] rawBody.length=1159
[2025-08-20 23:43:30][350762190044694][603 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzYyMTkwMDQ0Njk0IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzMwU05NSloiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE0OTEifQ=='" -e "main()" -q"
[2025-08-20 23:43:30][350762190044694][603 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:43:30][350762190044694][604 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUwNzYyMTkwMDQ0Njk0IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzMwU05NSloiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE0OTEifQ=='" -e "main()" -q"
[2025-08-20 23:43:32][350762190044694][3211 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUwNzYyMTkwMDQ0Njk0IiwibW9kZWwiOiJTTS1YMjAwIiwicHJvZmlsZV9JRCI6IjY4Nzk3MGYzZDZjZjg1NWY5ZGQzOTNiZiIsImdyb3VwIjoiMzk2OGU5MjEtODIwZS00Y2ExLWE1NzktMjllNTk5OGVlN2E1IiwidHlwZSI6IktNRSIsInJlZyI6InVzIiwiZGV2aWNlU2VyaWFsTnVtYmVyIjoiUjhZVzMwU05NSloiLCJzY2hlbWUiOiJRUl9DT0RFIiwiZW1haWwiOiJzdXBAZ3VwLjMzbWFpbC5jb20iLCJjYXJyaWVyIjoiWEFSIiwib3MiOiIxMiIsImtub3hTZGtWZXJzaW9uIjoiIEtOT1gtMzMiLCJkZXZpY2VJZCI6IlNFQzEwOUMwNzlBQzE0OTEifQ=="\r\n
[2025-08-20 23:43:36][350762190044694][6789 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22edfffa-d951-48c6-af9c-79fa101c6056","id":"QR_22edfffa-d951-48c6-af9c-79fa101c6056","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:43:36][350762190044694][6789 ms][DEBUG] proc_open done in 6186 ms; code=0; res.len=3152
[2025-08-20 23:43:36][350762190044694][6790 ms][DEBUG] END   runCmdUntilRes#1 in 6186 ms
[2025-08-20 23:43:36][350762190044694][6790 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:50:06][356939100191153][1 ms][INFO] === Request start ===
[2025-08-20 23:50:06][356939100191153][2 ms][DEBUG] START check_frida
[2025-08-20 23:50:06][356939100191153][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:50:06][356939100191153][298 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2263084   4332 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:50:06][356939100191153][298 ms][DEBUG] check_frida: running
[2025-08-20 23:50:06][356939100191153][298 ms][DEBUG] END   check_frida in 296 ms
[2025-08-20 23:50:06][356939100191153][298 ms][DEBUG] START check_internet
[2025-08-20 23:50:06][356939100191153][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:50:07][356939100191153][689 ms][DEBUG] SU: done in 391 ms; outPING google.com (216.58.204.238) 56(84) bytes of data.\n64 bytes from lhr48s22-in-f14.1e100.net (216.58.204.238): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.959/200.959/200.959/0.000 ms\n
[2025-08-20 23:50:07][356939100191153][689 ms][DEBUG] check_internet: online
[2025-08-20 23:50:07][356939100191153][689 ms][DEBUG] END   check_internet in 391 ms
[2025-08-20 23:50:07][356939100191153][689 ms][DEBUG] START check_scloud
[2025-08-20 23:50:07][356939100191153][689 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:50:07][356939100191153][1001 ms][DEBUG] SU: done in 312 ms; outu0_a118      20979 10674 23610100 74812 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:50:07][356939100191153][1001 ms][DEBUG] targetPkg: running
[2025-08-20 23:50:07][356939100191153][1001 ms][DEBUG] END   check_scloud in 312 ms
[2025-08-20 23:50:07][356939100191153][1001 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:50:07][356939100191153][1001 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTM5MTAwMTkxMTUzIiwibW9kZWwiOiJTTS1BMzA1RyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIyOE0zMkpIM01XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTA5In0='" -e "main()" -q"
[2025-08-20 23:50:07][356939100191153][1001 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:50:07][356939100191153][1001 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU2OTM5MTAwMTkxMTUzIiwibW9kZWwiOiJTTS1BMzA1RyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIyOE0zMkpIM01XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTA5In0='" -e "main()" -q"
[2025-08-20 23:50:10][356939100191153][3610 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU2OTM5MTAwMTkxMTUzIiwibW9kZWwiOiJTTS1BMzA1RyIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlIyOE0zMkpIM01XIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTM1IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM1MTA5In0="\r\n
[2025-08-20 23:50:13][356939100191153][7125 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a59ed0df-f4ba-4fb8-85c4-db55d86e2cba","id":"QR_a59ed0df-f4ba-4fb8-85c4-db55d86e2cba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:50:13][356939100191153][7125 ms][DEBUG] proc_open done in 6123 ms; code=0; res.len=3152
[2025-08-20 23:50:13][356939100191153][7125 ms][DEBUG] END   runCmdUntilRes#1 in 6123 ms
[2025-08-20 23:50:13][356939100191153][7125 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:51:12][352288967573473][1 ms][INFO] === Request start ===
[2025-08-20 23:51:12][352288967573473][2 ms][DEBUG] START check_frida
[2025-08-20 23:51:12][352288967573473][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:51:12][352288967573473][297 ms][DEBUG] SU: done in 296 ms; outroot         20950     1 2263084   4444 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:51:12][352288967573473][297 ms][DEBUG] check_frida: running
[2025-08-20 23:51:12][352288967573473][297 ms][DEBUG] END   check_frida in 296 ms
[2025-08-20 23:51:12][352288967573473][297 ms][DEBUG] START check_scloud
[2025-08-20 23:51:12][352288967573473][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:51:13][352288967573473][532 ms][DEBUG] SU: done in 234 ms; outu0_a118      20979 10674 23627616 73800 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:51:13][352288967573473][532 ms][DEBUG] targetPkg: running
[2025-08-20 23:51:13][352288967573473][532 ms][DEBUG] END   check_scloud in 234 ms
[2025-08-20 23:51:13][352288967573473][532 ms][DEBUG] rawBody.length=1161
[2025-08-20 23:51:13][352288967573473][532 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY3NTczNDczIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMktNME5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxMyJ9'" -e "main()" -q"
[2025-08-20 23:51:13][352288967573473][532 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:51:13][352288967573473][532 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjg4OTY3NTczNDczIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMktNME5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxMyJ9'" -e "main()" -q"
[2025-08-20 23:51:15][352288967573473][3187 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjg4OTY3NTczNDczIiwibW9kZWwiOiJTTS1BMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFRBMktNME5KIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBRkEiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0yOCIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjAxMyJ9"\r\n
[2025-08-20 23:51:17][352288967573473][5312 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fe72b84-3c85-43ef-9adc-2eaf06ca1dbb","id":"QR_0fe72b84-3c85-43ef-9adc-2eaf06ca1dbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:51:17][352288967573473][5312 ms][DEBUG] proc_open done in 4780 ms; code=0; res.len=3152
[2025-08-20 23:51:17][352288967573473][5312 ms][DEBUG] END   runCmdUntilRes#1 in 4780 ms
[2025-08-20 23:51:17][352288967573473][5312 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:54:09][354126950983143][1 ms][INFO] === Request start ===
[2025-08-20 23:54:09][354126950983143][2 ms][DEBUG] START check_frida
[2025-08-20 23:54:09][354126950983143][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:54:09][354126950983143][301 ms][DEBUG] SU: done in 299 ms; outroot         20950     1 2262072   4376 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:54:09][354126950983143][301 ms][DEBUG] check_frida: running
[2025-08-20 23:54:09][354126950983143][301 ms][DEBUG] END   check_frida in 300 ms
[2025-08-20 23:54:09][354126950983143][301 ms][DEBUG] START check_internet
[2025-08-20 23:54:09][354126950983143][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com"
[2025-08-20 23:54:10][354126950983143][783 ms][DEBUG] SU: done in 482 ms; outPING google.com (216.58.205.46) 56(84) bytes of data.\n64 bytes from mil07s19-in-f14.1e100.net (216.58.205.46): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.281/202.281/202.281/0.000 ms\n
[2025-08-20 23:54:10][354126950983143][783 ms][DEBUG] check_internet: online
[2025-08-20 23:54:10][354126950983143][783 ms][DEBUG] END   check_internet in 482 ms
[2025-08-20 23:54:10][354126950983143][783 ms][DEBUG] START check_scloud
[2025-08-20 23:54:10][354126950983143][783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:54:10][354126950983143][1065 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23627648 74516 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:54:10][354126950983143][1065 ms][DEBUG] targetPkg: running
[2025-08-20 23:54:10][354126950983143][1065 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 23:54:10][354126950983143][1065 ms][DEBUG] rawBody.length=1160
[2025-08-20 23:54:10][354126950983143][1065 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTI2OTUwOTgzMTQzIiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMTZCUURLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDk4In0='" -e "main()" -q"
[2025-08-20 23:54:10][354126950983143][1065 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:54:10][354126950983143][1065 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU0MTI2OTUwOTgzMTQzIiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMTZCUURLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDk4In0='" -e "main()" -q"
[2025-08-20 23:54:13][354126950983143][3704 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU0MTI2OTUwOTgzMTQzIiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1hBMTZCUURLIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFUVCIsIm9zIjoiMTEiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM4NDk4In0="\r\n
[2025-08-20 23:54:16][354126950983143][7203 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22bf8fc6-eb7a-4150-8e88-8359b8a1c975","id":"QR_22bf8fc6-eb7a-4150-8e88-8359b8a1c975","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:54:16][354126950983143][7204 ms][DEBUG] proc_open done in 6138 ms; code=0; res.len=3152
[2025-08-20 23:54:16][354126950983143][7204 ms][DEBUG] END   runCmdUntilRes#1 in 6139 ms
[2025-08-20 23:54:16][354126950983143][7204 ms][INFO] SUCCESS response from frida (len=3152)
[2025-08-20 23:57:20][357315235174506][1 ms][INFO] === Request start ===
[2025-08-20 23:57:20][357315235174506][1 ms][DEBUG] START check_frida
[2025-08-20 23:57:20][357315235174506][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll"
[2025-08-20 23:57:20][357315235174506][262 ms][DEBUG] SU: done in 261 ms; outroot         20950     1 2263084   4428 poll_schedule_timeout 0 S frida-server\n
[2025-08-20 23:57:20][357315235174506][262 ms][DEBUG] check_frida: running
[2025-08-20 23:57:20][357315235174506][263 ms][DEBUG] END   check_frida in 261 ms
[2025-08-20 23:57:20][357315235174506][263 ms][DEBUG] START check_scloud
[2025-08-20 23:57:20][357315235174506][263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll"
[2025-08-20 23:57:21][357315235174506][544 ms][DEBUG] SU: done in 281 ms; outu0_a118      20979 10674 23627680 73940 ep_poll             0 S com.sec.enterprise.knox.cloudmdm.smdms\n
[2025-08-20 23:57:21][357315235174506][544 ms][DEBUG] targetPkg: running
[2025-08-20 23:57:21][357315235174506][544 ms][DEBUG] END   check_scloud in 281 ms
[2025-08-20 23:57:21][357315235174506][544 ms][DEBUG] rawBody.length=1161
[2025-08-20 23:57:21][357315235174506][544 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzE1MjM1MTc0NTA2IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RBMEJOVzRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNCJ9'" -e "main()" -q"
[2025-08-20 23:57:21][357315235174506][544 ms][DEBUG] START runCmdUntilRes#1
[2025-08-20 23:57:21][357315235174506][544 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3MzE1MjM1MTc0NTA2IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RBMEJOVzRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNCJ9'" -e "main()" -q"
[2025-08-20 23:57:23][357315235174506][3183 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3MzE1MjM1MTc0NTA2IiwibW9kZWwiOiJTTS1HOTkwRSIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1RBMEJOVzRWIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEzIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zNiIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNzAxNCJ9"\r\n
[2025-08-20 23:57:25][357315235174506][5449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f402dd5-352d-4d6f-ba46-f56ab48b0652","id":"QR_2f402dd5-352d-4d6f-ba46-f56ab48b0652","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n
[2025-08-20 23:57:25][357315235174506][5449 ms][DEBUG] proc_open done in 4904 ms; code=0; res.len=3152
[2025-08-20 23:57:25][357315235174506][5449 ms][DEBUG] END   runCmdUntilRes#1 in 4905 ms
[2025-08-20 23:57:25][357315235174506][5449 ms][INFO] SUCCESS response from frida (len=3152)